ppt-slide-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s “Step 1: Deep Research” explicitly performs “thorough web research” and the resulting slide text/data is then presented and approved (Steps 2–3), so the workflow ingests outsider-authored free text from the web without requiring the user to pre-select a specific page/item.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The HTML output loads and executes remote JavaScript libraries at runtime (required by the skill) from https://cdn.jsdelivr.net/npm/html2canvas@1.4.1/dist/html2canvas.min.js and https://cdn.jsdelivr.net/npm/jspdf@2.5.2/dist/jspdf.umd.min.js, which fetches and runs third-party code in the user's browser and are specified as required dependencies for the download fallback.