obsidian-process-pages

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow reads and parses the full contents of pages/*.md notes at runtime (step “Read the full note”), and those note bodies/attribution lines/footnote definitions are free text authored by parties other than the operating user, which can then be included in the agent’s LLM context for classification/transformation.