excalidraw-diagram-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill instructs users to download .excalidrawlib files from the public site https://libraries.excalidraw.com and then reads local files like libraries//reference.md and icons/*.json (200–1000 lines each) which are arbitrary third‑party files the agent may ingest and interpret as part of its workflow.