open-design-game-ui-takeover

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow validates and reads takeover-evidence.json plus bound files (e.g., artifactBinding.artifact HTML, previewManifest, generationEvidence, archiveReplayManifest) from the evidence root, meaning outsider-authored free text inside these JSON/HTML/binary-backed artifacts is ingested at runtime by the validator.