anthropic-style-diagram

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). At runtime, scripts/render.mjs reads the provided input SVG (readFile(options.input, 'utf8')) and injects it verbatim into a Playwright page via page.setContent(... ${source} ...), so any outsider-authored SVG text/labels become LLM-readable page content (and thus in-context), creating indirect prompt-injection risk.