stelow-product-ux-critique

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s “Mode: Live Site Audit” opens a user-supplied URL and uses a browser/subagent to explore and evaluate the site content at runtime, meaning outsider-authored free text on that URL (e.g., page text) is ingested without selecting a specific item first.