nocobase-prototype-repro

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime path explicitly curls/reads the user-provided prototype HTML (Phase 0 “Load the target” → “Curl/read the prototype” and optionally parses embedded <script type="application/nb-spec+json">), so any free text/spec embedded in that outsider-authored prototype can be ingested into the agent’s LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the receiving agent to curl external prototype URLs at runtime (e.g. http://localhost:4321/prototypes/app-library/NN-*.html or https://static-docs.nocobase.com/solution/templates/NN-*.html) to load HTML that may include an embedded nb-spec and runnable JS kernels which directly control build instructions and code execution, so this is a runtime external dependency that can control prompts/execute code.