dingtalk-markdown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Required workflow includes markdown fetch (download and read remote .md original); the remote markdown body is ingested as plain text (stdout content) at runtime, and that remote content may contain outsider-authored free text (e.g., user-created/hosted doc).