ui-slop-score

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s review workflow ingests a user-provided rendered screen (e.g., a screenshot or running app) at runtime (“Inspect the real screen first”), which is outsider-authored free text in the sense of user-submitted content being analyzed without selecting a trusted item.