edu-chem-reaction

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 运行时会把 skill 构造/注入的 reaction spec 中的 steps[].html（外部内容会作为 spec 字段进入 JS 的 DATA）通过 template/reaction.html 在 updateStep() 里执行 document.getElementById('explanation-text').innerHTML = s.html，属于对“自由文本/HTML”的直接读取与渲染。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The HTML template (template/reaction.html) includes external CDN scripts/styles that are fetched at runtime and execute remote code required for rendering—specifically: https://cdn.tailwindcss.com, https://cdnjs.cloudflare.com/ajax/libs/KaTeX/0.16.8/katex.min.css, https://cdnjs.cloudflare.com/ajax/libs/KaTeX/0.16.8/katex.min.js, https://cdnjs.cloudflare.com/ajax/libs/KaTeX/0.16.8/contrib/auto-render.min.js, and https://cdnjs.cloudflare.com/ajax/libs/three.js/r128/three.min.js, so these are runtime external dependencies that execute remote code.