ppt-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs in Step 2 "资料搜集" and Step 1 "有搜索能力时：搜索主题背景资料" to use search engines, URL reading and document parsing (搜索引擎、URL 读取、文档解析) to ingest open web content and then consume those search results in downstream steps (Steps 3–5) to drive prompts, planning, and generation, so untrusted third‑party content can materially influence agent decisions.