ui-demo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to browse target web application pages (which may contain user-submitted content) using Playwright during the discovery phase, but this falls under active search/fetching rather than monitored feeds/queues.