book-distill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Outsider-authored free text is ingested because Stage 0/1/1.5 read the book’s extracted chapter Markdown ($TSUNDOKU_MARKDOWN_DIR/<slug-id8>/NN-chapter.md), and that content is authored by someone other than the operating user (the book’s author), which the LLM then uses to generate skill context.