visualize

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text from the bundle’s Markdown files is read at runtime via p.read_text() in scripts/okf_visualize.py and embedded into the generated HTML/inline JS (__NODES__/n.body), which is then rendered client-side—so any outsider content inside the provided bundle becomes LLM-relevant text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The generated HTML embeds external CDN scripts that are fetched at page-load and execute remote JavaScript which the visualization depends on (https://cdn.jsdelivr.net/npm/cytoscape@3.30.2/dist/cytoscape.min.js, https://cdn.jsdelivr.net/npm/marked@14/marked.min.js, https://cdn.jsdelivr.net/npm/dompurify@3.4.12/dist/purify.min.js), so they are runtime-fetched code dependencies.