edu-plane-geometry

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 模板 template/board-geo.html 在运行时从 __LESSON_DATA__ 的 DATA.lesson.problem/DATA.steps 等字段直接读取并写入 innerHTML/KaTeX 渲染（JSON注入路径为 generate.py 用 template.replace(..., json.dumps(data))），因此若外部用户可影响这些字段的任意文本内容，就会被该工作流程的前端 LLM/JS渲染链路摄入。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The HTML templates load remote JavaScript/CSS from CDNs (e.g. https://cdn.tailwindcss.com and https://cdnjs.cloudflare.com/ajax/libs/KaTeX/0.16.8/katex.min.js) which are fetched and executed by the browser at runtime and are relied upon for rendering/behavior (KaTeX for math rendering), so they constitute runtime remote code execution.