seaslides-html-slides-skill

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Several URLs point to small or unusual domains (typo-like minimaxi.com, private-sounding mineru.net, and an odd subdomain on volces.com) that look like non-standard/self-hosted APIs or possible typosquats — common vectors for untrusted/malicious tooling and file delivery.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the standard slides runtime, Step 1/2 reads user-supplied Markdown/text or converts user-provided web pages/PDF/DOCX into Markdown, and that resulting free text is then used through the Strategist/Executor to populate content.html and ultimately html_compiler.py --all renders it.