slidewright

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Provider runtime ingests only user-supplied talk text passed via the chat command to generate slide content and speaker-notes files, which the agent then renders into a deck (projected) without any requirement to fetch outsider-authored content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The plain-HTML scaffold injects and runs the remote Tailwind runtime script at https://cdn.tailwindcss.com when the generated index.html is opened in a browser, which is a required runtime dependency that executes remote code in the client.