nested-container-clean-agency

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow is to recreate a demo by treating an included Neuform demo (demo/index.html) as the reference; that demo is outsider-authored free text/HTML content that the agent reads and uses at runtime (public web content fetched/used as the reference snapshot).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). demo/index.html loads remote JavaScript at runtime (https://cdn.tailwindcss.com and https://code.iconify.design/iconify-icon/1.0.7/iconify-icon.min.js), which will execute fetched code in-page and are listed as required runtime dependencies in demo/source.json.