google-chat-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill ingests and acts on user-provided, potentially untrusted content (e.g., templates/interactive-bot.ts reads and echoes event.message.text from Google Chat spaces, and templates/webhook-handler.ts parses incoming POST JSON {message} from external webhooks), so the agent will read/interpret third‑party/user-generated content as part of its workflow.