stardust

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's extract and runtime workflow clearly fetch and ingest live site content (originUrl, crawled pages, screenshots, and media) — e.g., the Setup and artifact map require running the extractor/Playwright loader that writes stardust/current/pages/.json and stardust/current/assets/media from the target site's URLs — and those extracted, public-page contents are read and used to drive direction, prototype, and migrate decisions, so untrusted third‑party page content can materially influence actions.