lazyweb-design-improve

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill's required workflow (see "4. Web Research + Live Screenshot Capture (REQUIRED)" and "5. Download References" plus the "Search Connected Inspiration Libraries" steps) tells the agent to browse arbitrary public URLs with the LB tool (e.g., $LB goto "https://competitor.com/page"), take snapshots/screenshots, and curl image URLs—and it requires reading those pages/screenshots and their visionDescription to drive improvement ideas, so untrusted third‑party web content can directly influence actions.