get-catalog-tree

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text can be ingested if the user supplies a document or a SoMark JSON file (via --file/--dir/--json) that contains arbitrary embedded text, which is then sent to SoMark parsing and returned as JSON that the script reads (extract_catalog/load_json) at runtime.