react-grab

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider free text can enter the LLM context via the browser-captured React element HTML/stack (e.g., outerHTML/htmlPreview from the live page) that is then pasted or returned through the MCP tool (get_element_context)—the page content is not authored by the operating user.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The install snippets and framework examples include a runtime import/script tag loading remote JavaScript from //unpkg.com/react-grab/dist/index.global.js which will be fetched and executed in the browser to provide the overlay/prompt features (i.e., executes remote code at runtime).