extract-template

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow guides the agent to download and ingest user-uploaded files, documents, and reference pictures (such as .pptx, .docx, .pdf, and image files), but does not monitor or consume outsider-authored free text feeds, queues, or inbound submissions automatically.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The instruction files reference an operational npx command that retrieves and executes a remote package (${CLI_PKG_URL}) from the npm registry without pinning a digest or hash.