frontend-audit

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). scripts/_omniparser.py (invoked by bootstrap-regions.mjs) calls huggingface_hub.snapshot_download to fetch and then import/execute the remote repo microsoft/OmniParser-v2.0 (Hugging Face), which downloads and runs remote code/model weights at runtime and is relied on by the default OmniParser bootstrap.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill instructs the assistant to provision system-level dependencies (e.g., installing Python via sudo apt/dnf, sudo dnf install, or other package-manager commands), create venvs and write files under user/home and project directories—i.e., it explicitly runs privileged system install commands and modifies machine state—so it must be flagged.