design-systems-slds-validate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/analyze-quality.cjs, the runtime workflow reads and regex-parses user/outsider-authored component files (.css, .html, .js) from the provided <component-path> (including HTML content) via findFiles() + fs.readFileSync(), so arbitrary free text in those files can be ingested without selecting a specific trusted item first.