soia-dev-officecli-ops

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). SKILL.md’s required runtime workflow runs scripts/officecli_inspect.py / scripts/officecli_safe.py which execute OfficeCLI read operations like -- view issues and -- view html/screenshot, ingesting free text extracted from the user-supplied Office document (outsider content) into the agent context via captured stdout/JSON.