obsidian-vault

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow directly reads/writes local Markdown files under a hard-coded Obsidian vault path using find/grep -rl on *.md, which means any outsider-authored note content placed into that vault (e.g., via synced/shared files) can be ingested without selecting a specific item.