markitdown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime path is converting user-supplied files (e.g., PDFs/HTML/images) via md.convert(...), and the extracted result.text_content (which can include arbitrary outsider-authored text embedded in those documents) is then assembled into Markdown and thus becomes LLM-readable context for downstream use.