sn-ppt-standard

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The pipeline explicitly downloads and renders external, potentially user-supplied web resources: scripts/export_pptx.mjs calls downloadRemoteImages(args.deckDir) to fetch remote images and scripts/export_pptx/lib/dom_extractor.mjs loads and evaluates the slide HTML in Playwright (page.goto(file://...)) to extract DOM/chart data and images that directly affect HTML→PPTX conversion and asset selection, so untrusted third‑party HTML/images are ingested and can influence tool behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). scripts/export_pptx/html_to_pptx.mjs calls runtime installers ('npm install' and 'npx playwright install chromium') which will fetch and install/execute packages from the npm registry (implicit: https://registry.npmjs.org) and Playwright download endpoints — these network fetches occur at runtime and are required for the export step.