html-to-interaction-prompts

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads the user-supplied HTML/content (“Inspect the real source first… Read the HTML, CSS, and scripts… Search for interaction terms… Treat source behavior as truth”), so outsider-authored free text can be ingested when the user provides an HTML page/export for processing.