docx

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow for editing “someone else’s document” (the redlining workflow) ingests the body text of an outsider-authored DOCX by unpacking it and reading word/document.xml/word/comments.xml (and converting it to markdown via pandoc --track-changes=all), which is then placed into the agent’s LLM context for analysis and change planning.