html2pptx

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path reads outsider-authored free text from the user-provided poster.html (via page.goto(file://...) and DOM traversal in scripts/html_to_pptx.py/extract_dom()), then passes extracted text content into the LLM only for vision auditing—there is no “must first select a specific item” guard against indirect prompt-injection via that HTML content.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill's setup explicitly instructs running a privileged command ("sudo apt install libreoffice-impress") and includes other system-level install steps (font installation / fontconfig changes), which require elevated rights and modify the host system state.