local-web-surface

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL 规定需要在运行时提供 loopback gateway/服务以按 exact Host 路由处理传入 HTTP 请求（request headers+URL 被网关读取并驱动响应），而这类输入可由同机非受信本地账户/进程构造任意 free text（HTTP Host/path 等）触发处理。

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill explicitly instructs creating and installing persistent macOS LaunchAgents, .app launchers and starting/verifying long‑running listeners via launchctl/lsof — actions that modify the machine's persistent state and install services.