ios-workflow-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs a delegated UX research agent in Phase 4 to "Search for reference examples using WebSearch" and "Visit 2-3 reference examples," which requires fetching and interpreting arbitrary public web pages (third-party content) as part of the workflow.