agentic-mermaid-live-editor-development

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow describes handling editor state and preview input derived from the editor’s URL sharing/state hash (via the sharing/codec pipeline in editor/js/sharing.js and editor/js/rendering.js), which means outsider-authored free text can be injected through externally supplied URL payloads that the editor parses at runtime.