accessibility

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/verify.sh, when @axe-core/playwright is available and A11Y_URL is set, the workflow performs page.goto(url) on a runtime-supplied URL and then ingests the page’s rendered text/DOM content via new AxeBuilder({ page }).analyze()—meaning outsider-authored free text could be read if the URL’s content is attacker-controlled.