lovstudio-professional-infographic

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The outsider-controlled text path is user-provided --source (written into source.md and templated into poster.html) which is then ingested by the LLM at runtime via the rendered HTML DOM text read by the browser audit (page.goto(...); page.evaluate(... el.innerText ...)).