skill-creator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). eval-viewer/generate_review.py reads run files from the user-controlled workspace (e.g., transcript.md and outputs/*.txt/.md/.json) and embeds their contents into an HTML page; this lets outsider-authored free text (from run prompts/outputs/feedback) be ingested into the viewer runtime without selecting a specific item first.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The eval viewer's HTML (eval-viewer/viewer.html) loads and will fetch the remote SheetJS script at runtime (https://cdn.sheetjs.com/xlsx-0.20.3/package/dist/xlsx.full.min.js), which executes remote JavaScript in the user's browser to render spreadsheets and is relied on by the viewer functionality.