aiz-infographic

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These links include a raw GitHub install script (curl | bash) and the repository/releases pages which can be used to distribute installers/scripts from an unvetted user—downloading and executing the raw install.sh is high risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill ingests outsider-authored free text at runtime via user-provided content inputs (paste/file/URL/structured text) and then renders it into the infographic during the §4 Content Intake → §5 Guided/§6 Generation flow.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill inserts CDN script tags for Chart.js and D3 (including d3-sankey) into generated HTML which are fetched and executed during export/rendering (Playwright/Chromium), so the external JS at https://cdn.jsdelivr.net/npm/chart.js@4/dist/chart.umd.min.js, https://cdn.jsdelivr.net/npm/d3@7/dist/d3.min.js and https://cdn.jsdelivr.net/npm/d3-sankey@0.12/dist/d3-sankey.min.js will be loaded and run at runtime.