pptx

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill ingests outsider-authored free text that is embedded inside user-provided PowerPoint (.pptx) files by reading and extracting presentation contents (e.g., converting PPTX to markdown or unpacking and reading OOXML like ppt/slides/slide{N}.xml, notesSlides, and comments) at runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs the user to run "sudo apt-get install" for system packages (LibreOffice and poppler-utils), which requests elevated privileges and thus pushes modification of the machine state.