zotero-obsidian-bridge

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's workflow (SKILL.md and references/WORKFLOW.md / references/PAPER-NOTE-SCHEMA.md) explicitly reads Zotero items—including metadata, attachments, PDF full text and treating Zotero "webpage" items as valid inputs—and the agent is expected to interpret that third-party web/user-provided content to create/synthesize notes and update inventories, so untrusted external content can materially influence its actions.