visual-design

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's "From a Website URL" mode (see SKILL.md and references/from-url.md) explicitly instructs the agent to visit and inspect arbitrary public website URLs and extract DOM/computed-style values to drive DESIGN.md generation, meaning it ingests untrusted third‑party web content that can materially influence subsequent tool actions.