webapp-testing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). In the “Reconnaissance-then-action” pattern and examples, the runtime navigates to a page (e.g., http://localhost:5173) and ingests whatever text is rendered in the DOM via calls like page.content() / page.locator(...).all(), but the workflow itself does not provide an outsider submission/queue-feed path beyond the target webapp content.