html-to-pdf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The html-to-pdf skill’s required runtime workflow calls scripts/render.py, which uses WeasyPrint to fetch and parse the provided --html input when it is an http(s)/file:///local path, thereby ingesting outsider-authored free text contained in that HTML document (and its referenced resources) at runtime.