office-docx

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill processes arbitrary .docx files provided by the user, which can contain untrusted external text and comments.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill prompt instructs the agent to install system packages using sudo apt-get install, which requires sudo privileges and modifies the system state.