outline-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime path includes ol search / ol doc get which fetches rendered markdown or raw markdown from the user’s Outline wiki (outsider-authored content from other authors), and that readable text is then ingested into the agent context for summarization/processing.