a11y

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow includes a dynamic pass that, when a dev URL is reachable, loads affected routes and runs axe-core/Chrome DevTools via MCP, which necessarily ingests runtime-rendered page content (including any outsider-authored text present on those pages) into the agent’s LLM context through the tool’s results.