page-weight-budget

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is fetched from the user-supplied URL at runtime via mcp__playwright__browser_navigate and then read/processed as page DOM/asset metadata through mcp__playwright__browser_network_requests and browser_evaluate (e.g., scripts/styles/image URLs and sizes), which the LLM ingests into its context for reporting.