nested-container-clean-agency

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). Outsider-authored free text is likely ingested via the runtime “Reference snapshot”/demo that this skill is used to recreate (a public web page at neuform.ai is explicitly referenced in demo/PROMPT.md, and the HTML’s visible copy/strings come from that reference rather than from this skill’s bundled text).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). demo/index.html loads remote JavaScript at runtime (https://cdn.tailwindcss.com and https://code.iconify.design/iconify-icon/1.0.7/iconify-icon.min.js), which will execute fetched code in-page and are listed as required runtime dependencies in demo/source.json.