obsidian-publish-customize

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Outsider free text can enter the LLM context via the runtime “fetch the live docs”/“fetch the live docs” guidance: the skill instructs fetching public web content (e.g., help.obsidian.md, docs.obsidian.md, GitHub/community forum pages) and then using that readable text, which is outsider-authored, as LLM context.