computer-use

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes a computer_use runtime that ingests UI text via screenshot + accessibility tree during computer_use(action="capture", mode="som|ax|vision"), where the on-screen content can be outsider-authored (e.g., an external web page or messaging app) if the workflow navigates to it, creating an indirect prompt-injection path.