flowchart-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 工作流在“用户描述 → AI 解析为节点数据”后，直接把用户提供的免费文本（例如节点的 step/role/condition/文档字段）用于生成 .drawio 的 mxCell value（runtime path: FlowchartBuilder.generate_xml_content() → render_process_node()/render_decision_node() → _clean_xml_text()/f-string 注入 XML）。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The renderer downloads and auto-installs draw.io desktop binaries at runtime from GitHub release URLs (e.g. https://github.com/jgraph/drawio-desktop/releases/download/v26.0.16/draw.io-26.0.16-windows-installer.exe), which fetches and executes remote installer code when exporting VSDX, creating a high-confidence execution risk.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs the agent to "自动下载并安装" draw.io (auto_install=True) and to disable automatic updates by writing config files, which entails installing system software (potentially requiring elevated privileges) and modifying system/user configuration on the host.