build-daily-inspiration-sites

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.72). The workflow reads articles/YYYY-MM-DD-ui-inspiration-capture/manifest.json and content.md from the user-supplied/selected capture folder, which can contain outsider-authored free text (e.g., copied from public UI inspiration pages) and then passes that text into the per-item “detailed builder prompt”/task briefs that the Codex tasks receive as LLM context.