human-priority-desktop-control

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime UI Automation path (scripts/desktop_uia.ps1 → Convert-Element → Write-Json) ingests outsider-authored free text from the target app’s accessibility properties (e.g., AutomationElement.Current.Name, HelpText, ClassName, FrameworkId, etc.) into the agent-visible JSON/LLM context via uia-tree/uia-find/uia-assert/uia-* outputs.