ppocrv5

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the required runtime workflow reads outsider-provided content by accepting user-supplied --file-url (including arbitrary image/PDF URLs) and passing it to scripts/ocr_caller.py, which then ingests and returns result.full_text extracted from that content.