inbox-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Runtime path obsidian_get_note format:"content" / format:"document-map" ingests the text body of notes under Inbox/, which are outsider-authored free text (the operating user did not author the inbox items themselves), creating indirect prompt-injection risk.