docx

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). In the “Redlining workflow” the runtime path pandoc --track-changes=all path-to-file.docx -o current.md converts the (potentially outsider-authored) DOCX body text into markdown, which is then ingested by the agent for review/edits—i.e., free text from an outsider document enters the LLM context.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The prompt explicitly instructs installing system packages with "sudo apt-get install" (and other global installs), which encourages privilege escalation and modifying the host system state.