Prompt Injection: Email and Chat Connectors

Anyone with your email address or workspace ID can write into your agent's context. Email body payloads, calendar invite payloads, Slack/Teams messages, attachment payloads, reply-as-exfil, sender allowlisting limits, auto-triage as injection magnet.