lovstudio-any2pdf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/md2pdf.py, the runtime workflow reads the user-supplied Markdown file content (main() → f.read() into md_text) and then ingests that untrusted free text throughout parsing (parse_frontmatter, _preprocess_md, parse_md, md_inline, and image/callout/table/math rendering).