zotero-cli-cc

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Category: public-web / outsider-authored PDF or workspace document text—at runtime the workflow can extract and return free-form PDF/RAG chunk “content” from items/attachments not authored by the operating user (e.g., zot workspace query and zot --json pdf ... ingest document text and feed it into the agent context).