reading-digest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow reads user-selected Yuque documents and pastes text, requiring the agent to actively fetch and ingest specific content provided or requested by the user rather than monitoring an unselected, outsider-submitted queue.