eliteforge-poseidon-ui-design

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md:70 requires fetching Ant Design Vue “官方 Vue Demo” pages/code from https://www.antdv.com at runtime, which is public outsider-authored free text that would be ingested into the LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). SKILL.md explicitly instructs the agent at runtime to open and read external component demo pages (e.g. https://www.antdv.com/components/-cn and the overview page https://www.antdv.com/components/overview-cn) and to ingest the Vue example source for implementation/review, which means remote content is fetched and incorporated into the agent's runtime context.