recovering-deleted-files-with-photorec

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). In scripts/agent.py, the runtime workflow ingests outsider-authored free text only indirectly by running photorec on a user-supplied image_path and then catalogs/hashes the recovered files from output_dir, but the workflow does not itself fetch or monitor any external text source like email/chat/tickets/issue bodies that an outsider can post into without the agent selecting an item.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly requests root/sudo usage and contains sudo install and device-access commands (e.g., sudo apt-get install, sudo photorec /dev/sdb), which push the agent to obtain elevated privileges and modify system state.