mobbin-ui-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow calls Mobbin’s search_screens tool, which returns third-party app screenshots and metadata (public web/app content authored by outsiders) that the agent then ingests as readable text (app names/URLs) and base64 images for visual analysis—an outsider-source injection surface.