pptx

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow uses markitdown to extract text from user-provided .pptx files, which may contain untrusted text.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill prompt instructs the agent to run apt-get commands requiring sudo privileges to install system packages, which violates the security guidelines against asking the agent to obtain sudo privileges or run commands that require them.