chart-visualization

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md step 3/4 and scripts/generate.js the workflow directly ingests user-provided fields into the JSON args payload (e.g., title, chart labels/POI names) without selecting a specific trusted item first, then forwards them to the visualization request at runtime.