anydesign

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Runtime flow for the skill’s URL capture uses WebFetch to retrieve the page HTML and then scripts/extract_css_vars.py downloads linked stylesheets; both are outsider-authored web content (public URL) that can include arbitrary text/strings in HTML/CSS which may be ingested into the agent context.