use-computer-mcp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow’s runtime path relies on computer_get_app_state (and subsequent UI actions) to snapshot and read accessibility tree text from the currently targeted desktop app/window (e.g., Helium), which can include outsider-authored content displayed in that UI without first selecting a specific benign item.