arcgis-media-layers

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill loads and displays external media from arbitrary URLs (e.g., image/video fields like "https://example.com/historical-map.png" and "https://example.com/timelapse.mp4" and user-supplied imageInfos URLs), which are untrusted third-party sources that the agent ingests as part of its workflow.