calibre-distill-topic

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text is ingested indirectly from the user’s Calibre library via calibre_search over comments and via calibre_get_content(..., cursor=...) reading selected chapters from candidate books, so any text an outsider has added into those book records/comments can flow into the LLM at runtime.