minimax-pdf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). CREATE/REFORMAT runtime path ingests outsider-authored free text from --content (user-supplied content.json derived from source.md in REFORMAT) into render_body.py, which passes item["text"]/item["caption"]/etc. into ReportLab Paragraph objects (LLM-readable prose context is effectively the document text being rendered).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's runtime can invoke npm/npx to install Playwright and Chromium (e.g., the make.sh fix step runs "npm install -g playwright && npx playwright install chromium" and render_cover.cjs may run "npx playwright install chromium"), which fetches and executes remote packages from the npm registry (see https://www.npmjs.com/package/playwright), so this is a runtime external dependency that executes remote code required for cover rendering.