frontend-designer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs the agent to perform WebSearch and to analyze user-provided links/reference websites and design files (see Phase 2 "Design Assets Collection" and "Utilize Tools for Research" / Tool Usage Instructions), so the agent will fetch and interpret untrusted public web content that can materially influence its actions.