ios-mcp-routing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Skill.md routes iOS work between XcodeBuildMCP and Argent and explicitly uses Argent UI/discovery tools like describe/native-describe-screen and interaction loops after launching apps, which will ingest screen/app accessibility/DOM text at runtime that can originate from user-controlled or third-party content.