obsidian-query-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow reads outsider-authored free text from the local Obsidian wiki files (wiki/*.md) via Phase 3 full-text keyword scan (and potentially Phase 2 vector DB results that map to those nodes), so any third-party-authored wiki content can be ingested into the agent’s LLM context.