visio-image-rebuilder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads and parses a user-provided .vsdx (ZIP) at scripts/visio_page_tools.ps1 → Inspect-VsdxPackage (unzips and loads visio/pages/page1.xml into an XML reader, counts shapes, and enumerates visio/media/*).

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (low risk: 0.30). The skill does not ask for sudo or to modify system services or accounts, but it instructs running PowerShell with "ExecutionPolicy Bypass", terminating/closing processes, and performing package/XML edits and writes outside the workspace — actions that bypass a security control and can change system state, so it poses a low-to-moderate risk.