grocery-shopping

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's Phase 6 "Instacart workflow" explicitly instructs opening and interacting with Instacart.com (and mentions Costco pages) via a Chrome extension/assistant, which requires reading and acting on content from public third‑party websites and could allow that content to influence actions like adding items to a cart.