pdf-explore

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s PDF Explore / runtime path uses helper functions like pdf_pages(path, ...), pdf_scan(path, ...), and pdf_grep(path, ...) which parse the contents of a user-provided PDF file into LLM-readable text/images, so any outsider-authored text embedded in that PDF is ingested at runtime.