gamma-migration-deep-dive

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow ingests outsider-authored free text via “content extraction” from source presentation files (e.g., reading PPTX XML text nodes and converting the extracted slide text into a Gamma prompt), meaning an outsider can poison the migration inputs by providing malicious text inside uploaded/placed presentation documents.