oma-slide

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill can fetch a chosen bold template’s remote design.md via oma slide styles get <slug> (untrusted data) and then uses it to author slide HTML/CSS, so outsider-authored free text can enter the LLM context through that fetched design.md content.