pdfco

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill accepts and processes arbitrary public URLs and uploaded file URLs via the url parameter (see endpoints like /pdf/convert/from/url, /pdf/convert/to/text and the async/upload examples), meaning it fetches and reads untrusted third‑party web content and user-provided files as part of its workflow.