from-pdf-skill-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow ingests the bundled PDF’s page images via pdftoppm and the subagent’s Read tool to transcribe them into markdown, and those PDF contents are outsider-authored reference documents (not created by the operating user), creating indirect prompt-injection risk through arbitrary text in the PDF.