pdf-review-comments

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow reads the user-supplied PDF file at runtime and extracts outsider-authored free text from its Highlight annotation fields (markup.getContents() for the reviewer comment and stripper.getTextForRegion(...) for highlighted text), then concatenates that into the generated markdown string that is written out (and could be shown to the user), so the LLM context would be fed with PDF-contained text/comments not authored by the operating user.