modern-css

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md "How to Check Baseline Status" guidance explicitly tells the agent to fetch public web pages (e.g., "BEST: Fetch https://web-platform-dx.github.io/web-features-explorer/groups/ and find the feature... then fetch it's detail page"), so the skill requires reading open/public third‑party content that can alter feature-recommendation decisions.