baoyu-slide-deck
Warn
Audited by Snyk on Aug 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Workflow ingests outsider-provided free text when the required flow starts from user input content saved as
source.mdand then processes that text in Step 1.2/Step 1.3 → Step 3/5 (outline/prompts generation), and it also allows reading user-modifiableprompts/*.mdduring Step 7/8 to embed into PPTX/PDF notes.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata