pdf-toolkit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In pdf-toolkit Path A (and related paths), the runtime ingests and extracts LLM-readable text/tables directly from the user-provided PDF file via scripts/extract.py using pdfplumber/pypdf without requiring any further “select a specific item” step, so an outsider can supply a poisoned PDF as the monitored input.