page-cro

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow can fetch arbitrary public HTML at runtime via scripts/conversion_audit.py’s --url path (urllib.request.urlopen(args.url)), then extracts page text (parser.full_text) and passes it into the agent’s analysis context, creating an indirect prompt-injection risk from outsider-authored web content.