design-system-synthesizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In Step 5 the workflow calls respira_extract_builder_content(page_id) for representative WordPress pages chosen from respira_list_pages, meaning outsider-authored page text (e.g., any content a non-trusted user inserted into those pages) is read directly and processed.