web-clone

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Required runtime workflow step “Step 2 · 没找到源码 → 浏览器侦察（探针）” runs node scripts/recon-site.mjs --url <原站URL> which uses Playwright to open attacker-chosen pages and ingests free text from the page DOM (e.g., headings/sections/body text and screenshot-driven signals) at runtime.