pp-agent-capture

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly describes commands like screenshot, record, find, and ocr that capture and extract text from open windows/displays (i.e., the user’s screen), which can include arbitrary untrusted web pages or user-generated content that the agent will read and interpret as part of its workflow.