markitdown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly supports and demonstrates converting HTML web pages and YouTube URLs (see "HTML | Web pages" in Supported Formats and the example md.convert("https://www.youtube.com/watch?v=VIDEO_ID")), so the agent will fetch and read untrusted public/user-generated content which can be interpreted by the workflow and thus materially influence subsequent LLM-driven actions.