pdf-online

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the DingTalk adapter’s AI Table runtime, the agent ingests SoMark-parsed outsider-controlled HTML/JSON table cell text (from user-supplied or user-triggered SoMark parsing) via _locate_aitable_inputs() → _standard_somark_artifacts() where _table_grid() uses _SomarkTableParser to parse selected["content"], then _route_signals()/_infer_field()/_normalise_field_value()/run_aitable_route() consume and transform those strings into write payloads.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The Notion adapter explicitly instructs the runtime to read the external resource notion://docs/enhanced-markdown-spec while SoMark is parsing, indicating a required runtime fetch whose content will influence conversion behavior (i.e., control instructions), so it is a risky external dependency.