dev-dashboard

No clear malware, credential theft, or unauthorized external data exfiltration is evident. The main security concern is XSS: API/project-derived Markdown is rendered as unsanitized HTML, and link protocols are not explicitly restricted. Review the backend data trust boundaries and sanitize Markdown output or disable raw HTML and unsafe URL schemes.