ux-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and ingests content from a user-provided live URL ("If the user provided a URL, also fetch the page content for structural analysis" in Step 1 of Process), which is untrusted public web content that the agent must read and use to drive its audit and subsequent decisions.