webos-tv

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs creating a hosted web app that redirects to and loads an external public URL (see "Hosted Web App Setup" and the index.html redirect to 'https://your-app.vercel.app'), so the runtime will fetch and render arbitrary third‑party hosted content that can influence app behavior.