office-docx

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). source-and-runtime: The skill’s runtime only parses attacker-provided text when it is contained in an existing DOCX file passed as a file path to Document(args.docx) (used by scripts/check_docx.py during the structure gate); there is no queue/feed/web/mail ingestion path in the required workflow.