document-to-action-items

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow uses web_extract to read outsider-provided URLs in step 1 (“Inventory the document set”) and then extracts the resulting text/tables in step 2 via ocr-and-documents/pdf/docx, so the agent can ingest arbitrary free text authored by outsiders.