lx-ppt
Warn
Audited by Snyk on May 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly accepts and prioritizes a deep_research_report_url (e.g., references/ppt.md and SKILL.md show using --deep-research-report-url like "https://cos.xxx/report.md") which the service will ingest and use to generate PPTs, meaning arbitrary third-party report content can be read and materially influence generation/editing decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata