ios-share-extension

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow is the Share Extension extracting outsider-authored shared content (URLs/text) from extensionContext.inputItems / loadItem, then using that readable text to call Convex actions in the extension LLM/code context (e.g., model.urlText/model.title passed to app:classifyShare and app:saveFromApp), creating an indirect prompt-injection risk because the shared page text/title can be attacker-controlled.