ea-obsidian-world-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Outsider-authored free text is ingested when the runtime reads user-supplied PDFs (via scripts/extract_pdf_text.py extracting plain text from <pdf_path> into <workspace>/_extracted/*.txt), and that extracted prose is then fed into later LLM steps for JSON extraction and note generation.