agency-grid-layout-minimal

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill's design guidance is benign, but demo/index.html hides its full page markup in a base64 blob that is decoded and injected at runtime, which obscures what the demo does, though the decoded design page shows no malicious behavior.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow treats the bundled demo/index.html, a community-published Neuform design selected by popularity ranking at sync time, as the mandatory visual and interaction reference, so its outsider-authored copy and markup are ingested at runtime.