html-to-image

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill accepts arbitrary HTML with external resources (e.g., Google Fonts, unpkg, Unsplash) and includes a "Website Screenshot" endpoint that fetches arbitrary public URLs (POST https://html2png.dev/api/screenshot), meaning it will ingest and render untrusted third-party web content.