open-notebook

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The Open Notebook skill documents a self-hosted API and documentation for managing research notebooks, sources, chat sessions, and document retrieval. While it can ingest web URLs or files, these are user-supplied actions or active fetching rather than an unmonitored outsider-submission feed like a chat or issue tracker.