book-distill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md describes a runtime flow that reads outsider-authored book content (PDF/EPUB extraction treated as untrusted) and then uses it to write the agent’s own reference files, and those extracted text passages become LLM-readable context during the “Reading a chapter” and distillation steps.