tzai-slide

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This points to a GitHub repository (kedoupi/tzai-image-skill) from an unknown author that the skill instructs you to install/run (via npx/engine scripts), which is a common vector for distributing untrusted executable scripts—therefore it should be treated as suspicious until verified.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow for /tzai-slide treats “Slash arguments / remaining user text” as the <user subject> prompt passed directly to the engine (bash "$ENGINE" slide --prompt "<user subject>"), meaning outsider-authored free text is ingested at runtime.