tauri-syntax-webview

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md and references explicitly show creating webviews that load external URLs (e.g., Pattern 2 with url: 'https://example.com' and references/methods.md/WebviewUrl::External) and include callbacks (on_page_load, on_navigation, eval, emit/listen handlers) that read and act on webview-provided payloads, which means untrusted third-party page content can be ingested and influence application behavior.