designer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Phase 1 Visual Inspection explicitly instructs the agent to "Navigate to the provided URL" using Playwright and to inspect/screenshoot the running application, which means it fetches and ingests arbitrary public URLs (untrusted third‑party content) and uses that content to drive critiques and follow-up recommendations.