website-screenshot

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill sends user-supplied URLs to the html2png.dev screenshot API (POST https://html2png.dev/api/screenshot with the "url" parameter) to capture live web pages, so the agent will ingest/display untrusted public website content that could contain indirect instructions.