electron

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required runtime workflow connects to an Electron app’s CDP port and then performs chrome-use snapshot/get text, which causes the agent to ingest the app’s page/webview DOM text and UI content (outsider-authored free text from the app’s loaded content, e.g., user-visible messages/labels), creating an indirect prompt-injection surface.