dogfood

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs an agent to browse and interact with arbitrary web applications provided by the user, which can contain outsider-authored content ingested at runtime via browser snapshots and page text.