beautiful-mermaid

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's scripts/render.ts contains an ensurePackage(...) function that dynamically imports and (with the --allow-install flag) auto-installs the third‑party "beautiful-mermaid" package from the public npm registry and then executes its renderMermaid function, meaning untrusted public package code could be fetched and run as part of the workflow.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill dynamically installs and imports the "beautiful-mermaid" package at runtime (via npm/bun, e.g. fetching from the npm registry https://registry.npmjs.org/beautiful-mermaid) which would fetch and execute remote code as a required dependency for rendering.