markdown-html-orchestrator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is the user-supplied markdown file body itself, which is read at runtime by doctype_classifier.py (input_path.read_text(...)) and then piped into route_explainer.py; this markdown may contain outsider-authored content, which becomes LLM-readable context when the orchestrator forwards the original markdown into the forked sub-skill.