accessibility-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow navigates to a runtime-supplied URL (navigation go-to --url "https://example.com"), then ingests the page’s ARIA/AX tree content via a11y take-aria-snapshot and a11y take-ax-tree-snapshot into the agent’s LLM context, which is outsider-authored free text from public web content.