anima

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly ingests and interprets user-supplied public URLs (e.g., "l2c" website cloning via playground-create with a url and "f2c"/codegen from Figma URLs) to generate code and drive publishing, so untrusted third‑party content can materially influence the agent's actions.