letterboxd-watchlist

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow (scripts/scrape_watchlist.py and SKILL.md) explicitly fetches and scrapes public Letterboxd user watchlist pages (e.g., https://letterboxd.com//watchlist/page//), ingesting untrusted, user-generated web content that the agent reads and outputs for downstream use.