gstack-style-doc

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow for gstack-style-doc generates a README from the outsider-authored user prompt (e.g., the runtime ingests the free-text prompt that describes the project/tool), so the LLM is directly exposed to arbitrary user text each invocation.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The review UI (workspace/iteration-1/review.html) loads and executes a remote JavaScript library at runtime from https://cdn.sheetjs.com/xlsx-0.20.3/package/dist/xlsx.full.min.js which runs remote code in the page and is required for XLSX rendering, so it is a runtime external dependency that executes remote code.