ux-principles

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow includes instructions to perform WebFetch on arbitrary user-provided or external URLs such as https://lawsofux.com/<law-slug>/, https://www.nngroup.com/articles/<article-slug>/, and https://builtformars.com/case-studies/<product>/. Since an agent following these instructions would fetch external web pages containing outsider-authored free text, this represents a low-risk indirect prompt injection exposure.