brainstorming

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). required workflow reads user-facing interactive browser state from the local companion server by monitoring/consuming $STATE_DIR/events (captured from browser clicks and terminal/browser interactions), which can contain outsider-authored free text in text fields.