build-gpui-apps

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads the user’s Paper.design evidence pack via Paper MCP tool calls (e.g., get_node_info/get_jsx/get_computed_styles) as free-text/structured text at extraction time, so outsider-authored design text can be ingested without prior item selection by the attacker.