electrobun-app-shell

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly shows loading arbitrary remote URLs (e.g., win.webview.loadURL("https://example.com") and ) and documents that BrowserViews "run preload scripts" and "have RPC bridge to Bun process" (with sandbox mode as an opt-out), so non-sandboxed third‑party web content can be ingested and can materially influence runtime behavior.