thirdparty-ui-ux-pro-max

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required runtime path runs scripts/search.py with a user-provided query that “searches 5 domains in parallel,” so it likely fetches public web content and passes the resulting free-form scraped text into the agent/LLM context, creating an indirect prompt-injection risk.