create-photo-grid-ad

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Yes—Phase 0 “Scrape clean product PNGs” and “Scrape brand palette + logo” uses brand_url to fetch and extract readable text/CSS/markup at runtime (outsider-authored web content), which is then used to derive palette and other fields that can be included in the LLM-readable brief.md context.