cad-viewer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). MoveIt2 runtime path scripts/viewer/moveit2_server/moveit2_server/server.py:handle_message ingests arbitrary JSON over the ws://127.0.0.1:8765/ws websocket (raw_message → json.loads → build_moveit2_context reads wire.payload.dir/file and read_srdf_source(srdf_path) parses attacker-chosen .srdf XML + _urdf_robot parses attacker-chosen .urdf), so outsider-authored free text can be submitted via the websocket feed the required workflow consumes.