excalidraw-diagram-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly instructs the assistant/user to download and load third‑party Excalidraw libraries from the public site https://libraries.excalidraw.com (see "When User Requests Icons" and the manual icon-integration steps and scripts), which are untrusted public resources the agent may be asked to read/ingest and that can influence diagram-generation actions — creating a real indirect prompt‑injection surface.