google-slides-automation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly shows runtime commands that fetch and extract text from Google Slides (e.g., python scripts/slides.py get-text "https://docs.google.com/presentation/d/..." and find/get-metadata), meaning the agent ingests user-generated third-party slide content from Google Slides which could contain instructions that influence subsequent actions.