memory

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads memory entities via mcp__memory__search_nodes, which retrieves user-contributed or external free text stored in the graph database without prior selective filtering.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill references an external Content Delivery Network URL (https://unpkg.com/vis-network@9.1.9/standalone/umd/vis-network.min.js) in its playground template script, which is fetched at runtime during visualizer generation as a common unofficial/third-party CDN dependency.