baoyu-post-to-x

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). High likelihood of outsider free text entering the LLM context via a “user-provided Markdown” workflow where md-to-html.ts parses article.md and (critically) downloads remote image URLs in the Markdown (http:///https://) at runtime, producing HTML/alt/link text that is then read and pasted by x-article.ts—even though the LLM itself isn’t called, this still constitutes untrusted outsider-provided text content flowing into the tool’s context used for generation/pasting.