second-brain

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Yes—during the capture step, the workflow fetches URL content at runtime (“fetch the article content … and save the readable text”), which is then ingested into the vault as readable prose and later read/compiled into LLM context; this is outsider-authored public web content.