pageclip

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md instructs the agent to use the Membrane CLI to connect to Pageclip and run actions (e.g., "membrane action run --connectionId=CONNECTION_ID --json"), which will fetch and read Pageclip form submissions (user-generated, public third-party content) that can be interpreted and used to drive subsequent actions.