Gmail Image-Set() Bypass Enables Token Exfiltration via AI

Gmail's image-set() fallback can be abused to make external requests, enabling exfiltration of Slack tokens through prompt injection in AI-connected email workflows.