framed-grid-layout

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime flow embeds demo HTML/CSS/JS (including the large encodedHtml free-form markup) into the agent’s execution context via demo/index.html’s frame.srcdoc = source, which is outsider-authored content (a Neuform “included demo/index.html” reference snapshot loaded at runtime) and is arbitrary prose/markup that can contain injection payloads.