brainstorming

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The two local/placeholder URLs expose or omit the session key for a locally hosted brainstorming companion (a non-standard host:port URL that can serve arbitrary HTML/JS) and therefore are risky to share or open as potential vectors for untrusted content; the GitHub and the primeradiant image link look like normal project resources.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the visual-companion workflow, the server watches screen_dir/state_dir files and records browser interaction text into state_dir/events (including textContent from clicked UI options), which the agent can read on the next turn before generating the design; this provides a runtime ingestion path for outsider-authored free text via user interactions in the companion.