paper-slide-deck

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow for academic papers runs scripts/detect-figures.ts, which extracts outsider-authored free text (figure/table captions) from the user-supplied source-paper.pdf via page.getTextContent() and then uses that extracted caption text to populate // IMAGE_SOURCE and slide prompts that are sent to the LLM for image generation.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The generate-slides.py script auto-installs and imports the google-genai package at runtime (via pip install google-genai), causing remote code to be fetched and executed from PyPI (https://pypi.org/project/google-genai/) which the skill relies on to generate images.