gws-sheets

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill's SKILL.md explicitly supports reading and writing Google Sheets (e.g., "Read values from a spreadsheet", +read, +append, and spreadsheets.get/values methods), which ingests user-generated/untrusted spreadsheet content via the Google Sheets API that could influence subsequent actions (updates/batchUpdate), enabling indirect prompt-injection from third-party data.