jb-obsidian-sync

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow ingests and edits note text from an Obsidian Sync vault by searching and reading Markdown files under the explicitly resolved VAULT_PATH (which can include outsider-authored note content), via filesystem search/read steps like rg ... "$VAULT_PATH" and subsequent “Inspect the target notes” before writing and syncing.