website-screenshot

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly describes using Notte's /scrape to fetch arbitrary public URLs and returns "markdown" page content (see "Scrape and Screenshot with Notte" and the Notte Response "markdown" field), so the agent will ingest untrusted third‑party web content that could contain instructions influencing subsequent actions.