md-to-word

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In md-to-word.cjs, the runtime workflow reads outsider-provided Markdown from the user-specified SOURCE.md (fs.readFileSync(sourcePath, 'utf8')) and then preprocesses it, renders Mermaid blocks into PNGs, converts local SVGs referenced from that Markdown, and passes the resulting free text into Pandoc for DOCX generation.