bilibili-comments

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The script fetches Bilibili comment text (including content.message) from Bilibili’s API responses inside the logged-in Chrome page context via browserFetchJson(...) → evalInPage(...) → fetch(...), so the LLM context can receive outsider-authored free text from third-party users’ comments.