web-visual-assets

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md "Source 1: Playwright Scraping" workflow explicitly instructs automated visiting/screenshotting of public websites and a YouTube channel (scraping open third‑party pages), so the agent ingests untrusted web content as part of its runtime asset-generation flow which can affect which assets are produced.