slide-deck

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In /slide-deck export the workflow runs Playwright to load http://${SLIDE_DECK_DEV_HOST:-localhost:3000}/slides/<slug>?present=0 and takes screenshots, meaning outsider-authored deck content in src/app/slides/<slug>/page.tsx (created from user free-text briefs) is rendered and thus ingested at runtime by the headless browser.