design-md

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The SKILL.md and references/format.md files instruct the agent to read website URLs and fetch/render online content (such as Google DESIGN.md specs or external sites), which is classified as low indirect prompt injection risk because the agent actively fetches specific URLs provided by the user or discovered in the repo.