wps-note

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads user-authored and imported notes (via import_web_page from whitelisted domains like WeChat/Zhihu/Douban, as well as regular note-reading tools like read_note, read_blocks, read_section), which can contain outsider-authored text.