alterlab-vcd-poster-designer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent in the Workflow and Agentic Protocol sections to "Search the web for visual references, current design trends, and campaign examples" (i.e., fetch and read public web content) which the agent will interpret and use to guide design decisions, exposing it to untrusted third‑party content.