docx

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow ingests a user-supplied .docx by unpacking it and reading its embedded text/XML (e.g., converting to markdown with pandoc and grepping/parsing word/document.xml / word/comments.xml), so outsider-authored free text in the document is directly processed.