live-demo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill drives a browser to scout and capture a target app, which exposes the agent to outsider-authored text displayed within the application UI during the capture workflow.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill clones a public GitHub repository (https://github.com/new-xp/ultrademo) during setup to build and execute its runtime pipeline, establishing a common unofficial operational dependency.