UI/UX Intelligence Expert

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow runs scripts/search.py with --design-system, which (per its description) searches multiple domains and returns “complete design system” content; that fetched public web text is then ingested into the agent’s LLM context, creating an indirect prompt-injection path from outsider-authored web pages.