winui-design

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly instructs using the bundled winui-search.exe (including the "update" command that refreshes embedded snapshots from GitHub) to fetch and read public WinUI Gallery/GitHub samples, meaning the agent will ingest and act on third-party, potentially user-generated content from GitHub as part of its workflow.