product-design-url-to-code

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow opens a user-supplied source URL at runtime and “capture[s] the source page carefully” (including visible text/DOM content), which is outsider-authored free text from public web content that can be read into the agent’s LLM context via the browser capture/DOM extraction path.