build-lab

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow ingests outsider-authored free text because it uses a filesystem loader to dynamically import each lab’s meta.ts from app/lab/<slug>/meta.ts, and those module contents are arbitrary code/text written by the project user/outsider authors (via lab folder creation) at runtime.