html-to-markdown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Outsider free text is fetched at runtime from the user-supplied URL via the headless browser in capture_html.py (tab.get_content() / document.title / document.contentType), then passed as readable HTML through stdin into markmaton_convert.py where it is converted and included in the LLM context.