ui-ux-pro-max

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow runs scripts/search.py with user-provided free text (e.g., product type/industry/keywords) and that script is described as searching “5 domains in parallel” and applying reasoning rules, which strongly implies it fetches/ingests external web/community content into the LLM context (indirect prompt injection risk).