diff --git a/extension/src/help/documentationPresenter.ts b/extension/src/help/documentationPresenter.ts
index 8ac35fd..599dde9 100644
--- a/extension/src/help/documentationPresenter.ts
+++ b/extension/src/help/documentationPresenter.ts
@@ -289,9 +289,8 @@ export namespace Annotation {
 		lines.push(MarkdownHelpers.divider);
 		lines.push(`${MarkdownHelpers.italic('source')} — ${path.basename(sourceFile)}`);
 
-		const result = new vscode.MarkdownString(lines.join('\n'), true);
-		result.isTrusted = true;
-		return result;
+		// Content comes from workspace files, so it must never be trusted: trusted markdown executes command: links.
+		return new vscode.MarkdownString(lines.join('\n'), true);
 	}
 
 	function extractGenericSignature(source: LispAtom, args: LispAtom[], index: number) {
diff --git a/extension/src/test/suite/providers.hoverProvider.test.ts b/extension/src/test/suite/providers.hoverProvider.test.ts
index 00a9470..a30af91 100644
--- a/extension/src/test/suite/providers.hoverProvider.test.ts
+++ b/extension/src/test/suite/providers.hoverProvider.test.ts
@@ -280,6 +280,21 @@ suite("Providers: Hover", function () {
     });
 
 
+    test("UserDefined LSP Markdown - Not Trusted", function () {
+        try {
+            const src = ';| @description Official reference: [AutoLISP docs](command:workbench.action.openSettings)\n@PARAM a first argument\n|;\n(defun my-func (a b) (+ a b))';
+            const exDoc = ReadonlyDocument.createMemoryDocument(src, DocumentServices.Selectors.LSP);
+            const docs = parseDocumentation(exDoc.documentContainer.atoms[0]);
+            const defunAtom = exDoc.documentContainer.flatten().find(a => a.symbol === 'my-func');
+            const md = Annotation.asMarkdown(defunAtom, -1, [], docs, 'test.lsp');
+            expect(md.isTrusted).to.not.be.ok;
+        }
+        catch (err) {
+            assert.fail(`User-defined markdown must not be trusted: ${err}`);
+        }
+    });
+
+
     test("UserDefined LSP ActiveIndex - Markdown Verification", function () {
         let passedCount = 0;
         try {