perf-dashboard

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow reads outsider-authored free text from runtime-generated JSON files under .perf/data/*.json (e.g., screen_summary.json, app_daily_trend.json, query_metadata.json) and injects their contents into the HTML/JS LLM context via template substitution (assemble_dashboard.sh reads the JSON as strings and replaces {{..._JSON}} placeholders in dashboard-template.html, which is then executed in the browser).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The generated dashboard page includes and will fetch/execute remote JavaScript from https://cdn.jsdelivr.net/npm/chart.js@4 at runtime in the user's browser, which is remote code execution the skill relies on to render charts.