gstreamer-docs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The skill fetches and text-extracts Hotdoc HTML from gstreamer.freedesktop.org at runtime (e.g., fetch --page ..., element --name ..., section --element ... → load_or_fetch()/fetch_element() → fetch_url() → TextExtractor), so any fetched page content (outsider-authored public web docs) can be ingested into the agent’s LLM context.