docx-to-web-publisher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime path is the user-provided .docx extraction (e.g., scripts/extract_docx.py reading word/document.xml from the uploaded/downloaded document) and then rendering that extracted text into the LLM context for structuring; since the document body is not authored by the operating user, it is outsider-authored free text.