raisindb-frontend-react

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill fetches and renders arbitrary content from a RaisinDB server/workspace (see lib/raisin.ts: query/getPageByPath, the SSR loader using createLoader, and the WebSocket hybrid client useHybridClient), where the server/repository URL and workspace are supplied at runtime—so untrusted, user-generated content from that external source could influence which components are rendered and runtime behavior.