iblai-vibe-notification

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In assets/notification-bell.tsx.j2 the runtime renders the third-party @iblai/iblai-js/web-containers NotificationDropdown using outsider-controlled localStorage values (userData/tenant) that can cause the UI to fetch and display user notifications whose free-text bodies are then ingested by the LLM/agent at render time.