ugc-video-auto

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill automates browsing and interacting with public higgsfield.ai pages (e.g., https://higgsfield.ai/image/soul-v2 and https://higgsfield.ai/create/video?model=seedance_2_0) via Playwright, explicitly reads DOM content (history grid, Lexical editor, dialog tabs) and uses that content to choose images and drive clicks/generation, meaning untrusted/user-generated third‑party content can directly influence tool actions.