book-serif-index

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The demo wraps its entire page in a base64 string that is decoded and injected into a sandboxed iframe, which hides the real content from casual review, but the decoded page looks like a benign WebGL landing page with no harmful behavior, so this is sketchy rather than malicious.