react-feature-development

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's workflow explicitly asks the user to "share" external design references (e.g., mockups, Figma files) in Step 1 and instructs the UX Designer agent to "use them as the primary source," which implies ingesting and acting on arbitrary third‑party user-provided/public design content that can materially influence implementation decisions.