pptx

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required PPTX “editing an existing PowerPoint presentation” runtime workflow, the agent unpacks the user-supplied .pptx and reads raw OOXML text/XML (e.g., slide and notes XML) via python ooxml/scripts/unpack.py ..., so outsider-authored free text inside the uploaded presentation is directly ingested.