lov-any2pdf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Markdown skill ingests the user-supplied markdown file content via --input and then renders it at runtime in main()->PDFBuilder.build()->parse_md()/md_inline(), meaning outsider-authored free text is directly LLM-processed into PDF content.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill includes explicit installation commands that affect system state — pip with --break-system-packages and a sudo apt install ... suggestion — which can prompt or encourage privileged changes to the host environment.