design-express

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Loop A/B explicitly instructs the runtime to “load the URL with browser tooling” and/or “read the image” from a user-provided link/screenshot, which can include outsider-authored free text from public web pages or other parties’ content that the LLM ingests for critique/build.