re-js-app

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow reads and parses the extracted app’s bundled JavaScript (e.g., app.asar → out/main/*.js / client/*.js) into the LLM context via the agent’s analysis of that deobfuscated source; that source is outsider-authored because it comes from a third-party application archive the operating user did not author.