pdf-with-mineru

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Required workflow runs uv run mineru on a user-supplied absolute PDF path, then the agent reads the generated markdown (find ... -name "*.md" then “引用、总结、提取段落都基于 markdown 内容”); the markdown text ultimately originates from the PDF file provided by someone other than the operating user (outsider-authored document content), so this free text can flow into the LLM context.