web-design-reviewer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md workflow explicitly requires the agent to "Open" and inspect "deployed or in-development web interfaces" (Visual inspection step), which implies browsing/ingesting arbitrary public websites whose untrusted, user-generated content could inject instructions that alter the agent's decisions or actions.