page-template

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Several URLs point to a private Tailscale-hosted server (bigblack.tail0f299b.ts.net) — a non-public/personal hosting surface that can serve arbitrary files and is therefore a higher-risk source for downloads compared with official vendors/CDNs.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). scripts/build-nav.py at runtime reads and parses all user-provided HTML files under the specified site root (via walk_site()->section_dir.rglob("*.html") and parse_html()->path.read_text) to extract / and inject the rendered rail into those same files.