debug-mode

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In assets/collector.py the runtime workflow exposes an HTTP do_POST endpoint (/log/<token>) that directly ingests outsider-controlled JSON from the browser/probes into payload (parsed via json.loads) and later surfaced by debug_session.py (e.g., logs_session/doctor reading events.jsonl).