pdf-processor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly fetches and scrapes arbitrary public URLs (e.g., "Use Linkup to fetch PDF URLs" and ScrapeGraph calls with "website_url" in Step 1–3) and requires the agent to read and extract data from those untrusted, user-provided web/PDF sources as part of its processing, which could allow indirect prompt injection from third-party content.