uicolor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In Phase 1/3, the skill’s runtime Playwright script visits a user-specified --url (default http://localhost:3000) and runs page.evaluate to ingest computed CSS color values from whatever rendered DOM that URL serves, without requiring the text to come from a specific, trusted item first.