alterlab-vcd-layout-designer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly requires the agent to "Search the web for editorial design references, grid system examples, and production standards" (Workflow step 1 and the Agentic Protocol), meaning it will fetch and read untrusted public web content that can directly influence design decisions and subsequent tool actions.