ppt-master

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Step 1 explicitly ingests arbitrary web pages via "python3 ${SKILL_DIR}/scripts/web_to_md.py " and the Strategist role uses the converted source content to generate the design_spec and drive subsequent automated image/SVG generation and tool actions, so untrusted public webpages can directly influence decisions and workflows.