Pptx

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow for this skill can ingest outsider-authored free text from an OUTSIDER-provided PPTX file via markitdown/inventory.py/thumbnail.py (e.g., python -m markitdown file.pptx or python scripts/inventory.py working.pptx ...), which reads the presentation’s text content and feeds it into the agent’s LLM context for analysis/replacement.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The prompt explicitly advises installing system packages with sudo (e.g., "sudo apt-get install libreoffice" and "sudo apt-get install poppler-utils") and recommends global installs that may require elevated privileges, which encourages modifying the machine's state and obtaining root privileges.