minimax-xlsx

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime reads outsider-authored free text from the user-supplied Excel/CSV file itself (e.g., worksheet cell <f> formula text and <v> cached error values) via formula_check.py/xlsx_reader.py, so there is a direct “upload poison then ingest it” path into LLM-visible strings at runtime.