thesis-word-formatter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly requires ingesting and "先读懂要求" from user-provided school templates, format specifications, or "格式规范文档、截图或链接" (Required Intake and Workflow step 1), meaning the agent will read and act on arbitrary third-party/untrusted materials which can influence formatting decisions.