htmx-devtools-extension

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill is a browser extension that captures HTMX request/response bodies and DOM snapshots from the current page at runtime (e.g., “Response HTML: Raw HTML received from server” and “Request and response bodies”), so any outsider-authored free text returned by the server or present in the page can be ingested into the extension’s LLM context via the DevTools panel’s captured text.