tzai-dataviz

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). This is a third‑party GitHub repository that the skill instructs users to install/run (an executable script), which can execute arbitrary code and therefore represents a moderate-to-high risk unless the repo and author are verified.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime path bash "$ENGINE" dataviz --prompt "<user subject>" sends the user’s free-text “subject” directly to the image-generation engine as the prompt, so outsider-authored text is ingested at runtime.