Custom argument '--attacker-injected-flag' is not a recognized docling CLI flag. Only known docling flags are permitted as custom arguments.