reskin

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider free text from the user-supplied live <content-url> / donor <url> is fetched at runtime and read by the Playwright-based capture/gate scripts (scripts/capture-content.mjs and scripts/dom-equality.mjs via page.evaluate()), then serialized into content-model.json/reports that are later consumed by the renderer/LLM context; this is an indirect prompt-injection path because arbitrary page text can be attacker-controlled.