read-personal-data-harvester

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Yes: the required runtime workflow uses Playwright to fetch outsider-authored free text from public/authenticated web pages (e.g., Douban cards’ inner_text/comment via page.goto(...) and query_selector(...).inner_text()), which is then stored and can be surfaced to the agent later (Step 6), creating an indirect prompt-injection path.