slide-deck

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow involves converting legacy PowerPoint files (PPTX) supplied by the user at runtime, which contain external/outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill's documented workflow generates slide decks, converts PPTX files, and exports slide snapshots. The "vercel" export option deploys to Vercel via the vercel CLI, but the skill text explicitly states "Deploy is a real-money operation. Export mode's vercel path prompts before deploying." However, since this is a direct deployment / publishing instruction without a qualifying independent access control enforced by the service layer (as the prompt execution is user-driven or agent-run shell commands), it represents a direct operation without established qualifying control.