visual-validate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow navigates to a user-provided dev server URL and then uses MCP tools (new_page/navigate_page plus screenshot/DOM snapshot/console/network capture), so outsider-authored free text can be ingested via the page’s rendered content and associated console/network data.