argent-macos-app-interact

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow drives a user-chosen Mac app and reads its accessibility tree and screenshots, which can show outsider-authored text (for example web content, documents, or messages), but the agent must select the app and navigate to that content, so it is low rather than a monitored feed.