pretty-mermaid

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). Outsider-authored free text can be ingested when the runtime reads user-supplied .mmd files (e.g., via --input in scripts/render.mjs or --input-dir in scripts/batch.mjs) and passes their contents as the input string to renderMermaid(...), which then becomes LLM-readable text context (the Mermaid source) for rendering.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's runtime scripts will auto-run "npm install" and import the required dependency "beautiful-mermaid", which per package-lock.json resolves to the remote tarball https://registry.npmjs.org/beautiful-mermaid/-/beautiful-mermaid-0.1.3.tgz (remote code fetched and executed at runtime), and the skill relies on that package to function.