courseware-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow only ingests the outsider’s submitted course topic/outline during Phase 1/2 and then embeds it into the generated HTML/JS STEPS content (rendered via render() using step.title, step.desc, step.points[].text, and step.code).