obsidian-wiki-ingest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow ingests user-selected external files/directories (outsider-authored content) and reads their bodies to generate ingestion payloads for the LLM, creating an indirect prompt-injection path via the file text that the runtime script processes into LLM context.