latex-posters

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The scripts call the OpenRouter API at https://openrouter.ai/api/v1 (and reference https://openrouter.ai/keys) at runtime to generate images and to obtain model review text which is fed back into the generator (the critique is used to modify prompts), so remote content directly controls prompts and the skill requires that API key—this meets the criteria for a high-risk runtime external dependency.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)