aut-sci-ppt

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the paper_workflow runtime path, the agent builds outline_text from outsider-authored Markdown (user-edited PDF outline file) and then ingests it into PPTAgent.generate(ppt_text, ...) via parse_outline_to_ppt_input() → _outline_to_ppt_text() → PPTAgent→ TextParser.parse(), so free text is read without selecting a specific item first.