pdf-explore

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Outsider-authored free text is the PDF’s own page text (public/untrusted document content) which is extracted at runtime by pdf_pages(..., mode="text") and then embedded into LLM prompts in pdf_scan/pdf_map/pdf_extract via pdf_guard_text(p["text"]) inside pdf_prompt_blocks-delimited <page-{nonce}>...</page-{nonce}> blocks.