macaron-card-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md workflow takes user-supplied text/JSON content, runs scripts/generate_card.py, embeds that text into generated HTML (e.g., card fields like title/quote/reason), then Playwright screenshots the resulting page into a PNG—so outsider free text is directly ingested into the runtime HTML.