webgl-laser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In demo/index.html the sandboxed runtime HTML is decoded from a base64 string into a full HTML document (including scripts) and then assigned to frame.srcdoc, so any outsider-authored content injected into that encodedHtml path would be ingested as free text by the browser/JS runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The demo includes runtime-script entries that are injected into the iframe and will fetch and execute remote JavaScript at runtime (notably https://cdn.tailwindcss.com/ and https://code.iconify.design/iconify-icon/1.0.7/iconify-icon.min.js), so these external URLs are runtime dependencies that execute remote code.