swiftui-webkit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow can load arbitrary web content via WebView(url:) / WebPage.load(URLRequest) (public web pages or user-supplied URLs), and that fetched page text/DOM becomes readable by the WebKit engine and can be surfaced to the agent through subsequent operations like callJavaScript, snapshot, pdf, or webArchiveData—an indirect prompt-injection path from outsider-authored content.