material-3

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md "Audit Procedure" explicitly requires auditing a user-provided live URL (it tells the agent to "use browser tools to inspect" the DOM/CSS variables and resize the viewport), so the agent will fetch and interpret arbitrary public web pages (untrusted third‑party content) as part of its workflow which can materially influence audit decisions and follow-up actions.