a11y

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime path “Phase 0c/0d/0e” runs Playwright page.goto(url) on a user-supplied --url and then ingests the rendered page DOM text into page.evaluate(() => window.axe.run(document, ...)) for the axe-core scan.