ui-ux-auditor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent (SKILL.md Step 1–2 and "For YouTube / Web URLs (use browser_subagent)") to fetch and navigate arbitrary YouTube and live web URLs and ingest screenshots/pages as part of the audit, which exposes it to untrusted public third-party content that can influence subsequent actions.