feature-video

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill's browser PR walkthrough path explicitly opens and reads GitHub PR pages and branch diffs (references/browser-pr-walkthrough.md), extracting PR textarea values and using PR/diff context to decide capture, upload, and PR-edit actions, which exposes the agent to untrusted, user-generated content that could carry indirect instructions.