creative-claw-onboard

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs the agent to use /create-brand-theme which "extracts the brand from your website, a folder of assets, or a list of URLs" (SKILL.md), meaning the agent will fetch and interpret content from public websites/URLs (untrusted third-party sources) to build themes that materially influence future generation behavior.