docx

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required “Redlining workflow” for editing someone else’s document involves unpacking and converting the target .docx (including its tracked changes/comments) into markdown/XML that the agent then reads, so outsider-authored free text from the user-supplied document can enter the LLM context via the document’s extracted text/markup.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs installing system packages with "sudo apt-get install" (e.g., pandoc, libreoffice, poppler), which requires elevated privileges and modifies the host system state.