pdf-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text can enter the LLM context via the OCR/caption runtime path: extract_scanned_pdf() / extract_hybrid_pdf() renders each page to PNG and then runs caption.py with a --prompt and the image content, where the captioner’s output (derived from the PDF’s page text) is then appended into all_text and fed to the agent’s LLM context.