baoyu-url-to-markdown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Outsider free text from a runtime-fetched URL is ingested into the agent’s LLM context via the fetched page content converted to markdown (e.g., genericAdapter captures snapshot.html from the target page and convertHtmlToMarkdown produces converted.markdown, which is then returned as document.content/markdown and used as LLM context/output).