swiftui

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md routes to the webkit skill, whose runtime workflow loads arbitrary web content (URLs/HTML/data) into a WebPage/WebView, and that page content can be read/extracted as text (e.g., via callJavaScript/DOM reads) and then fed into the agent’s LLM context.