kmjp-social

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow explicitly runs Filesystem:read_file on notes from the (user’s) Obsidian “vault” path /Users/kp/Documents/Mario Jude 25, which means outsider-authored text delivered as note content could be ingested and woven into the generated LinkedIn/X outputs.