obsidian-project-bootstrap

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required runtime workflow runs obsidian-project-memory/scripts/project_kb.py detect/bootstrap --cwd "$PWD", which (by its purpose of importing an existing repo’s Markdown/docs) is highly likely to read outsider-authored repository text (e.g., Markdown files from the repo user provided) and feed it into the LLM context during synthesis/summarization, creating an indirect prompt-injection risk.