visual-proof

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In capture.mjs, the runtime path page.goto(url) with attacker-controlled --url directly loads outsider-authored web page content into the headless browser and then reads/parses it via page.evaluate() (DOM inspection for dark-mode changes and overflow detection).