beautiful-mermaid
Warn
Audited by Snyk on Aug 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In the required workflow, the agent turns user-provided Mermaid text into SVG via
scripts/render.ts(--codeor--input->renderMermaid(mermaidCode, themeConfig)), and then embeds that SVG into an HTML wrapper consumed byagent-browserfor PNG screenshot capture.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata