audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow ingests OUTSIDER-authored free text when the runtime target is a public URL or externally provided local web project: it calls seo-orchestrator, which builds a shared PageSnapshot via seo-crawl-render (i.e., browser/page content fetched from the specified URL becomes LLM-readable prose in the audit context).