og-image-design

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly instructs the agent to run a web search via "belt app run tavily/search-assistant --input ..." in the "Testing OG Images" section, which fetches and exposes open/public third‑party web content that the agent would read and could influence subsequent decisions or actions.