tattoo-design-generation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's documentation includes web_search_query/web_search_citations in references/SSE-EVENTS.md and the SKILL.md "Reference Image Input" accepts arbitrary image_urls, showing the agent fetches and ingests untrusted public web resources (pages/images) that can influence its outputs and tool use.