html-cut

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/capture.py, the required runtime flow calls page.goto(url) with the user-provided url (or default) and then renders/screenshot the resulting webpage in Chromium, so outsider-authored free text from an arbitrary remote page can be ingested by the browser/JS at runtime.