pptx

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s required runtime workflow ingests outsider-authored free text contained in user-provided .pptx files via text extraction (e.g., python -m markitdown presentation.pptx) and subsequent QA rendering/inspection, since an attacker can upload a poisoned .pptx and have its embedded text extracted without selecting a specific item first.