create-design-md

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow explicitly fetches and mines “Live URL(s)” at runtime (public web content) via curl/stylesheet extraction and computed-style measurement, which can include outsider-authored free text (e.g., HTML/CSS/inline styles) that may be ingested into the agent’s LLM context.