lark-calendar

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow allows searching and retrieving calendar events and descriptions (+search-event, +get, +agenda), which may contain outsider-authored text (such as event descriptions or summaries), but the agent only processes these items after explicitly querying or searching rather than continuously monitoring an unselected external feed.