evernote-reference-architecture

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill directly ingests user-generated Evernote content from the Evernote API (e.g., CoreAPIService.getNote calls client.noteStore.getNote, SyncWorker uses syncService.getChanges, and SearchService.indexNote/extractText processes note.content), so untrusted third-party note data is read and can influence downstream processing.