lx-ppt

Warn

Audited by Snyk on May 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill explicitly accepts and prioritizes a deep_research_report_url (e.g., references/ppt.md and SKILL.md show using --deep-research-report-url like "https://cos.xxx/report.md") which the service will ingest and use to generate PPTs, meaning arbitrary third-party report content can be read and materially influence generation/editing decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 20, 2026, 09:42 PM
Issues
1
Security Audit — snyk — lx-ppt