mermaid

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads the Mermaid diagram content provided to scripts/validate.py via --input file contents or --stdin and then validates it (including parsing frontmatter and scanning node text), so outsider-authored free text submitted as the diagram body is ingested at runtime.