quarto-deck

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In Phase 5 “Rhetoric Review (Sub-Agent — Explore)”, the sub-agent is instructed to read the user-supplied Markdown file from “[PATH TO .md FILE]” and evaluate its slide text, meaning outsider-authored free text provided via the input markdown is ingested at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The Reveal.js markdown reference includes an explicit MathJax CDN URL (https://cdn.jsdelivr.net/npm/mathjax@3/es5/tex-mml-chtml.js) which will be fetched and executed in the browser at presentation runtime to render math, and the skill relies on MathJax for correct math rendering.