cometchat-android-v6-kotlin-customization

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's runtime binds and renders user-generated chat data (see bindContentView using message.metadata, BubbleViewProvider.bindView, and ImageView.load(message.sender?.avatar)), so untrusted third-party message content and URLs are ingested and can change which views/styles/factories are used and how the UI behaves.