stitch-extract-static-html

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow can fetch and inline arbitrary web page content at runtime via scripts/snapshot.ts (Puppeteer navigates to a user-supplied --url and then serializes document.documentElement.outerHTML), which is outsider-authored free text/HTML that becomes LLM-readable context through the generated .stitch/<page>.html artifact.