applicationinsights-web-ts

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source: @microsoft/applicationinsights-web in the browser; runtime path: it instruments and ingests free-text telemetry originating from end users’ page interactions (e.g., page views, exceptions, traces, and optionally GenAI content) and sends it to App Insights, meaning attacker-authored text can be submitted via user-facing inputs and captured by default/opt-in telemetry fields.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes a runtime loader script that fetches and executes remote JavaScript from https://js.monitor.azure.com/scripts/b/ai.3.gbl.min.js (used in the provided snippet), which is a remote code dependency loaded at runtime.