docx

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The docx skill’s runtime workflow ingests outsider-authored free text from user-supplied .docx files by converting/extracting their contents (e.g., via pandoc in the “Redlining workflow” or “Text extraction”), and it also explicitly unpacks and reads raw XML like word/document.xml from those files.