baoyu-url-to-markdown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/main.ts the required workflow takes a user-supplied <url>, launches Chrome to navigate to it, then reads the rendered page HTML/DOM via evaluateScript(cleanupAndExtractScript, ...) and converts it to markdown in scripts/html-to-markdown.ts—so outsider-authored free text on that page is ingested.