snowflake

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is ingested at runtime from the static page’s fetched template HTML (fetch(.../templates/<template>.html) in assets/substrate/scripts/scripts.js → resp.text() → DOMParser.parseFromString(...)), where that HTML originates from the user-supplied SOURCE_URL captured in Phase 1 (public/outsider-authored content).