debug-app

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). Runtime reads arbitrary app/runtime output from the Metro dev-server terminal via BashOutput($METRO_TERMINAL_ID) (primary/monitor loop and also Phase 0.x/0.5), which can include outsider-controlled free text such as host/auth diagnostic strings and app log lines originating from external systems.