pdf-reader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Outsider-authored free text can enter the LLM context indirectly because the required workflow runs pdf_extract.py/pdf_search.py which print extracted PDF page text and matching context (from the user-supplied <path> PDF) as readable prose to stdout, which an agent could then pass into the LLM.