dogfood

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow uses browser tooling to navigate to the user-supplied Target URL and then ingests page text/structure via read_page/get_page_text (and screenshots/console reads), which can include outsider-authored free text from arbitrary web pages the operating user did not author.