baoyu-markdown-to-html

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/main.ts, the required runtime reads the user-supplied Markdown file (fs.readFileSync(markdownPath, 'utf-8')) and passes it through the Markdown renderer at scripts/md/render.ts via spawnSync('npx', ['-y','bun', renderScript, tempMdPath, '--theme', theme]), so outsider-authored free text is directly ingested when it is in the input Markdown.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The file scripts/md/utils/languages.ts constructs and dynamically imports highlight.js language modules from the external CDN URL https://cdn-doocs.oss-cn-shenzhen.aliyuncs.com/npm/highlightjs/${HLJS_VERSION} at runtime, which will fetch and execute remote JavaScript in the client environment.