perfect-web-clone

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In Phase 2/3, the workflow takes the user-supplied “URL to clone”, uses Playwright in scripts/extract_page.py to load that webpage and extracts raw_html/DOM/style text, then passes chunked html from chunks/section_N.json into per-section subagent prompts for code generation.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running "sudo apt-get install chromium-browser", which requests elevation and directs modification of the host system state, so it should be flagged.