design-distill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Yes—during the /design-distill <refs> workflow it uses agent-browser to open runtime reference URLs/pages (outsider-sourced) and extracts readable document.title/computed style text via agent-browser eval, which is then fed into the agent’s LLM context for the Claude Design prompt + moodboard synthesis.