pdf-upload-visual-artifacts

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly instructs the agent to download and open original customer PDFs from external sources ("Download the original customer PDF" and "Open the same file in Chrome PDF, Mac Preview, Slack attachment preview"), i.e., untrusted user-provided third-party content that the agent must read and use to decide remediation steps, which could allow indirect prompt injection via crafted PDFs.