design-systems-slds2-migrate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow runs npx @salesforce-ux/slds-linter@latest lint --fix ., which reads the repository’s user-authored .html/.cmp markup and .css files (including any attacker-controlled text within them) in order to produce/guide fixes.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The workflow mandates running "npx @salesforce-ux/slds-linter@latest lint --fix .", which uses npx to fetch and execute a remote npm package at runtime, making it a required external code execution dependency (npx @salesforce-ux/slds-linter@latest).