slide-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow (notably presentation.inspect() in artifact_tool/inspect.spec.md) ingests and snapshots text from an imported, user-supplied PPTX by reading all slide/text/notes/comment fields into JSONL for downstream edits, creating an injection surface via attacker-authored slide content.