c-web-capture

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's scripts explicitly load and analyze arbitrary public websites (see _scripts/capture-website-broll.mjs with --url and _scripts/discover-broll-urls.mjs with --domain in SKILL.md), so untrusted third-party page content is ingested and directly influences capture and discovery actions (scroll speed, page selection), creating a clear vector for indirect prompt injection.