bm-favicon-creator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Runtime path: the skill fetches “the exact SVG from lucide.dev” (public web content) based on the user’s icon name, and that fetched SVG text is then embedded into the generated public/icon.svg//tmp/favicon-source.svg and ultimately into the LLM’s working context during generation—an outsider-authored free-text source.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). This skill explicitly instructs the agent to fetch exact SVGs at runtime (defaulting to https://lucide.dev/icons and similar official icon-source URLs) and inject those remote SVG paths directly into the generated favicon files, so external content fetched during runtime directly controls the agent's output.