pandadoc

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly supports "Create Document from a PDF URL" (e.g., "url": "https://example.com/contract.pdf"), which causes the PandaDoc API to fetch and ingest arbitrary external (untrusted) PDF content that can be parsed into fields and thereby influence document creation and subsequent send/actions.