pdf-ingestion

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow is “PDF ingestion” where the agent either passes the PDF natively or runs pdftotext/OCR and then sends the extracted text into the LLM context; if the PDF is outsider-authored (e.g., a downloaded/forwarded PDF), that extracted free text becomes LLM-readable input at runtime.