axiom-swiftui-26-ref

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). This skill's "WebView & WebPage" section explicitly shows embedding and loading arbitrary web URLs (e.g., WebView(url: articleURL) and page.load(URLRequest(url: articleURL))) and mentions JavaScript execution and custom URL schemes, which clearly allows fetching and executing untrusted third‑party web content that could influence runtime behavior.