aso-appstore-screenshots

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow ingests outsider-authored free text from the user via the “Provide simulator screenshots” step and uses that user-supplied image content as reference inputs to the image backend (pixeltamer/Gemini) during the GENERATION “Enhance” stage, which can include arbitrary text embedded in those screenshots and is passed through the model without filtering.