markdown-to-pdf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow ingests markdown/HTML/CSS content to generate PDFs (e.g., reading user-provided md_content/HTML strings and passing them directly into Pandoc/WeasyPrint/ReportLab), so outsider-authored free text is commonly accepted as the document input without requiring the agent to select a specific item first.