editframe-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly supports rendering from arbitrary URLs (references/render.md shows the --url option and "URL mode: ... when rendering from a remote URL") and the cloud-render flow loads built pages in headless Chrome and calls getRenderInfo() in the page context (references/cloud-render.md), meaning untrusted third-party page content would be loaded and interpreted as part of the render workflow.