exploring-replay-vision-observations

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The agent reads session recording observations, metrics, and user feedback generated by scanners via PostHog API tools, but sessions can be staged by anyone holding the project token, presenting untrusted session content.