generators-app-extensions

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill generates runtime code that ingests arbitrary untrusted third‑party content (e.g., web pages via the Safari web extension content.js and native handler in templates.md "SafariWebExtensionHandler", and user-shared URLs/text/images via ShareViewController in templates.md), and those inputs are processed and can drive native actions (handleGetContent/handleSaveContent and saved shared data), so third‑party content can materially influence behavior.