design-system

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill_extract_design_system runtime path takes a user-supplied url at session creation and then headlessly walks the live DOM (via getComputedStyle) to extract colors/typography/spacing from that page’s rendered text and styles, so outsider-authored free text from the target page is ingested.