outline

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow step “Run read to get full document content” calls the Outline API (/documents.info) and ingests the returned text/markdown from an outsider-authored wiki document into the CLI output, which an agent can then pass into the LLM context (indirect prompt injection risk).