seaslides-typst-slides-skill

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Several entries point to short/opaque domains (fal.run), uncommon or personal file/API hosts (mineru.net and its API endpoints), a likely typosquatted API domain (api.minimaxi.com vs the legitimate-seeming api.minimax.io), and an unusual multi-level cloud subdomain (operator.las.cn-beijing.volces.com) — all of which are higher-risk as potential malware distribution or obfuscated executable hosting points.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the Full Mode Step 1 “Process Sources”, the workflow can read user-supplied Markdown/text directly and also converts provided web-page URLs into Markdown via python3 .../web_to_md.py <url>, so outsider-authored free text can enter the pipeline without first selecting a specific trusted item.