docx

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required “Redlining workflow” ingests outsider-authored free text from the user-supplied DOCX itself (e.g., pandoc --track-changes=all path-to-file.docx -o current.md and/or unpacking word/document.xml/word/comments.xml), which can contain arbitrary text authored by someone other than the operating user.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The prompt explicitly instructs installing system packages using sudo (e.g., "sudo apt-get install pandoc/libreoffice/poppler-utils") and recommends a global npm install (which often requires elevated privileges), thereby pushing modification of the host system and requesting elevated actions.