todoist-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill ingests and processes user-generated content from the Todoist service (e.g., api.get_tasks, api.get_comments, Sync API calls to https://api.todoist.com and webhook payloads at /webhook/todoist), and it uses that content in reports and posts (e.g., Slack/calendar), so untrusted third-party input could influence the agent.