x-article-publisher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). From scripts/publish_article.py → scripts/parse_markdown.py reads the user-supplied Markdown file content (free text), converts it to HTML, and then the HTML is copied/pasted into the page; since this Markdown can contain attacker-controlled text, it counts as outsider-authored free text reaching the runtime context (injected into the workflow, even if not from public web).