deterministic-design

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In design-spatial, the required runtime path uses Playwright browser_evaluate to execute layout-audit.js against a rendered page and then reads/overlays on-page DOM elements (geometry/contrast/tap/collision/balance), so any outsider-authored text that gets rendered into that page at runtime is ingested by the LLM as part of the screenshot/DOM-visual content the judge critiques.