slides-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow ingests outsider-authored free text when converting user-supplied PPTX files (Phase 4: “Convert a .pptx file” → extracted slide titles/content summaries and images), and that extracted text is then used to generate the HTML/LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill explicitly runs installable tooling at runtime for export/deploy (the export script will "install Playwright" via commands such as "npx playwright install chromium", and deployment uses the Vercel CLI via "npx vercel" / Vercel flows referenced at https://vercel.com), which will fetch and execute remote code during runtime.