html-to-pdf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's export_to_pdf.py explicitly accepts and opens arbitrary HTTP/HTTPS URLs (see the input_path handling and page.goto(url) in scripts/export_to_pdf.py and the SKILL.md example "uv run ... https://example.com output.pdf"), so it fetches and renders untrusted third‑party web content which the agent reads/evaluates (e.g., document.body.scrollHeight, network idle, JS execution) and which can influence rendering/waiting behavior and output generation.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill calls page.goto(url) with arbitrary http(s) inputs (e.g., https://example.com) at runtime, which loads remote pages whose JavaScript is executed in the Playwright browser and is required content for generating the PDF, so external URLs can execute remote code during runtime.