canvas-theme

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). At runtime, the skill’s workflow reads the target canvas’s existing shape text via the tldraw bridge/tooling: api.getFocusedDoc/api.getShapes pulls the current document’s shape records (including user-authored text), which are then placed into the agent’s prompt context for “current vs. target style” comparison and reporting.