presentation-automation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s “CI/CD for Presentation Generation” runtime path uses GitHub Actions to run scripts that generate reports from external data sources (e.g., via DB_URL/CRM in generate_from_crm.py), so attacker-authored free text could be ingested if it can be posted into those monitored external systems/inputs the scripts read.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The GitHub Actions workflow includes external action references (actions/checkout@v3, actions/setup-python@v4, actions/upload-artifact@v3) which are fetched and executed at workflow runtime, meaning remote code is run as part of the skill's CI job.