latex-setup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's Step 3 explicitly instructs the agent to "search for the official template: Download from the venue's official website", meaning it will fetch and read public third-party web pages (venue templates/instructions) and use those instructions to determine installation and compilation steps, which could enable indirect prompt injection.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly instructs running privileged installation commands (sudo apt, sudo tlmgr, brew cask) and changing system tooling/configuration, which modify the host system state and require elevated privileges.