storybook-pentest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Required runtime workflow renders and enumerates the target Storybook via GET <origin>/index.json and then drives iframe.html?id=<story-id>&... (including executing play-fn and typing stress payloads), so outsider-authored free text in story props/play functions is ingested by the LLM/agent at runtime as part of evaluating and reporting.