google-apps-script

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill includes examples and patterns that fetch and parse arbitrary external web content using UrlFetchApp (e.g., UrlFetchApp.fetch('https://api.example.com/data') and the fetchWithRetry pattern), so the agent may ingest untrusted third‑party content from the open web.