screen-recorder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly navigates to caller-supplied URLs (see Phase 1 url input and the generated script's page.goto in templates/record.mjs.template) including public preview/staging hosts passed by the reviewer caller (rules/integrations.md), captures user-generated page content as a video, and that recording is then fed to the downstream video-analyser workflow (rules/integrations.md) which can produce findings and recommended next actions — i.e., untrusted third-party content is fetched and can materially influence subsequent tool decisions.