xlsx

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In recalc.py, the skill’s runtime recalculation workflow loads and scans all cell text/strings from the user-supplied spreadsheet file (load_workbook(..., data_only=True) then iterates every cell and checks cell.value for error tokens), so outsider-authored free text inside the workbook is ingested.