mobile-design

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/mobile_audit.py, the runtime workflow reads and ingests the entire contents of filepath via f.read() (user-supplied project/source files), and then the LLM could be exposed to attacker-authored free text embedded in those files.