visual-companion

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The runtime path that feeds the agent’s LLM context is the browser event JSON returned by node scripts/wait-for-event.cjs "$STATE_DIR" (or recovered by read-pending-event.cjs), where scripts/helper.js sends user-entered free text from the served HTML (e.g., data-brainstorm-form textarea/input values) into state_dir/events/latest-selection.json, and the agent then prints/parses that JSON into the session context.