extracting-brand-kits

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow has the agent download and visually inspect a user-supplied reference video or screenshots, where on-screen text in frames is outsider-authored and the agent must actively fetch that specific chosen source, so the attacker can publish poison but cannot force delivery.