managing-obsidian-publish

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md includes required runtime steps that fetch and parse public Obsidian Publish content (POST to https://publish-01.obsidian.md/cache/$SITE_ID and GET to https://$SITE_ID.obsidian.md/), which are untrusted, user-published pages whose parsed fields are then used to drive discovery and analysis decisions—creating a clear vector for indirect prompt injection.