security-headers

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow requires running observe-runtime.mjs against a live URL or loading pages with loadUrlSite, which fetches HTML and assets from external web servers. However, this fetches provider-configured sites or URLs supplied by the user/operator rather than an automated feed or monitored outsider-authored queue.