pdf-converter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/to_pdf.py, the skill reads user-supplied file contents via read_text() and then feeds that untrusted free text into pandoc/HTML rendering at render_pdf(..., html_body) (and also into replace_emojis()), so an outsider can submit poison content through the monitored file input the workflow consumes.