replica

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In replica Phase 4 (source-fidelity gate), the workflow uses Playwright to fetch and measure attacker-controlled free text by navigating to the user-provided LIVE="https://<site>/<path>" URL and then running diff probes that read the resulting page content (content-diff.mjs/visual-diff.mjs) and stitch/pixel-compare (stitch-shot.mjs).