design-foundations

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Required runtime inputs are palette.json, typography.json, breakpoints.json, computed-styles.json, and representative HTML excerpts provided by the runner; those are derived from fetched/parsed web page content (outsider-authored) and thus can contain free-form text that becomes LLM-readable context (indirect prompt injection risk).