nielsen-heuristics-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow takes optional screenshots or links, user flows, known issues, and competitive context as inputs, which can involve fetching or processing external web content or bug reports authored by outsiders (low risk due to active fetching/search nature of inputs).