design-pdf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow’s PDF QA/inspection step ingests the user-supplied PDF’s extracted text via scripts/validate_pdf_bounds.py (using pdfplumber.open(...).pages and page.extract_words(...)), so outsider-authored free text in the PDF can be read at runtime.