webapp-ui-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow reads only first-party, repo-local files (references/.md, assets/.template.md, and runs scripts that scan local source files and optionally fetch a provided URL) and does not define a runtime path that ingests outsider-authored free text without an explicit, supplied target.