kde-rdp-desktop

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to use kli observe to capture the user's KDE framebuffer (see SKILL.md and references/cli.md "kli observe"), meaning the agent will ingest and act on arbitrary screen content (webpages, messages, etc.) that can originate from untrusted third-party sources and thus could contain instructions that influence subsequent actions.