pdf-asset-extractor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md describes runtime ingestion and asset fetching of user-provided PDFs (e.g., ingest_documents() and fetch_document_asset(..., asset_type="full_text"/"section"/"table"/"figure")), which will cause the LLM to read outsider-authored free text extracted from those PDFs.