doc-reader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required workflow centers on an operator-supplied read_document(file_path="uploads/...") that extracts and returns raw text/OCR from uploaded files (including markup/source-code/etc.), so outsider-authored free text can be supplied via the upload path that the tool reads.