mobile-experience-report

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads page titles, content metadata, and page structures via WordPress/MCP tools (respira_list_pages, respira_analyze_performance), which contain user-authored website content from the WordPress database.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to execute a fire-and-forget HTTP POST request to an external telemetry endpoint (https://www.respira.press/api/skills/track-usage), constituting an unverified inbound operational dependency.