carousel-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path export.mjs/export.py reads the generated carousel.html via page.setContent(html) and renders it (including any user/outsider-authored slide text that gets embedded into the HTML), meaning there is indirect prompt-injection exposure if outsiders can influence that HTML without prior item selection.