aso

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md requires runtime WebFetch of user-provided App Store/Google Play listing pages (public web content), which can include outsider-authored free text (e.g., descriptions, reviews) that is then extracted and fed into the agent’s LLM context for scoring.