ui-color-palette-manage-palettes

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.78). This skill’s runtime “Browse palettes”/“Load a palette for reuse” workflow calls list_published_palettes/get_published_palette (public community palettes), which ingests outsider-authored free text/fields like palette names/descriptions into the agent’s LLM context for “Visual display” rendering (even with “never show raw JSON”).