overview-crypto-portfolio

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime the required workflow opens DeBank profile pages for configured wallet addresses (chrome-use) and ingests document.body.innerText from those pages, which can include outsider-authored free text rendered on the site; the specific runtime path is the CHROME open/tab plus CHROME eval "document.body.innerText" sequence.