open-kimi-ppt

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). In SKILL.md step4 it runs scripts/export_images.py, which loads the user-provided .pptd deck into Kimi’s public editor via a browser workflow and visually QA reads the deck’s text/pages (and may also fetch remote assets referenced by the deck), but it does not ingest arbitrary outsider free text from a queue/feed without first selecting a specific user-provided item.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The prompt instructs automated, system-wide package installation (it will run npm to install agent-browser globally if missing/old), which changes the host system state and may require elevated privileges, so it poses a moderate risk of compromising the machine state.