doubao-visualization

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 在必读的运行路径中（命中 interactive_html 时），renderer 会内嵌并 JSON.parse 内部的 process/steps/coords/label 来生成 SVG/HTML 标注与图例，且这些 label 属于运行时可读的纯文本字段来源于“用户/外部输入到可视化规划的自由文本”（间接提示注入入口），例如 examples/image-overlay-gold-reply.md 的 <script type="application/json" id="svpdata">{"steps":[...,"label":"..."]}</script> 与随后使用这些 label 填入 pill()/legendRow() 的 textContent/innerHTML。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The repository includes HTML renderer examples that load and execute an external JS library at runtime (echarts) via the CDN URL https://cdn.jsdelivr.net/npm/echarts@5.4.3/dist/echarts.min.js, which is fetched/executed when the renderer runs and is a required dependency for HTML-embedded ECharts in the skill.