markitdown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly supports fetching and converting arbitrary URLs (see "markitdown https://example.com" in Basic Usage and "URLs | https://..." in Supported Formats), so it would ingest untrusted public web content that could carry indirect prompt injection.