readwise-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The Readwise CLI skill interacts with Reader documents, RSS feeds, and highlights saved by the user. While Reader can ingest articles, emails, tweets, and RSS feeds from external sources (which can contain untrusted free text), the workflow involves searching or listing documents that the user has explicitly saved or synchronized into their own Readwise library, making it an active search/fetch or own-tenant content model rather than an unmonitored external feed.