extract-design-md

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is ingested as readable prose from the target site’s pages at runtime: the skill uses firecrawl map/optional firecrawl scrape and also runs playwright-cli on user-supplied URLs, then later reads the scraped page copy (and uses screenshots only for prose) to generate DESIGN.md—all content originates from parties other than the operating user.