tesseract-image-ocr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path scripts/ocr.js runs worker.recognize(opts.image, ...) where opts.image is taken from user-provided CLI input (node scripts/ocr.js <image-path-or-url>), and if that input is an HTTPS URL or image containing text, the OCR result is ingested and emitted as free text at runtime.