show-me

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses a local web server (server.cjs) that monitors browser interactions and records click events to state_dir/events, which are then read by the agent on subsequent turns, allowing an attacker with browser access to inject untrusted input.