Review security risks and mitigations for remote WebF content (untrusted bundles, URL allowlists, HTTPS, trust boundaries, clickjacking). Use when the user mentions untrusted remote bundles, bundle URL validation/allowlists, or remote updates risk.
This skill is limited to using the following tools:
doc-queries.mdexamples.mdreference.mdIf the user is primarily asking about store policy/compliance for remote updates, prefer openwebf-security-store-guidelines.
More: