paper2video

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The OpenXML schema URLs are official, benign schema identifiers, but the third-party GitHub repo (https://github.com/hugohe3/ppt-master) is an external dependency cloned directly from an unvetted user and therefore a potential risk for delivering malicious code if not reviewed.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/add_subtitles.py, the required runtime workflow reads outsider-authored free text from project_path/notes/*.md (ppt-master “notes” route) and/or from --script-json/audio/script.json → sections[*].text, then splits it into subtitle cues and burns/muxes it into the output MP4.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs cloning the external repo "https://github.com/hugohe3/ppt-master" (SKILL.md:36) and then runs scripts from that PPT_MASTER_DIR (e.g., python "$PPT_MASTER_DIR/scripts/total_md_split.py" at SKILL.md:433), which is clear evidence the skill fetches remote code that is later executed at runtime and is a required dependency for the deck-generation route.