react-markdown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required workflow is to use WebFetch to read public GitHub README/docs at runtime; that fetched outsider-authored free text is then ingested into the agent’s LLM context for verification.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly requires runtime WebFetch calls to https://github.com/remarkjs/react-markdown (and to plugin docs at https://github.com/remarkjs/remark/blob/main/doc/plugins.md and https://github.com/rehypejs/rehype/blob/main/doc/plugins.md) and mandates not proceeding until those remote documents are fetched, so external content fetched at runtime directly controls the agent's instructions.