axiom-swiftui-26-ref

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill's SKILL.md explicitly documents embedding WebView/WebPage (e.g., WebView(url: articleURL), WebPage observable model) and mentions JavaScript execution and programmatic navigation in the "WebView & WebPage" section, which means the runtime can load and interpret arbitrary public web pages (untrusted third‑party content) that could influence app behavior.