brainstorming

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The optional “Visual Companion” flow serves HTML from a local watched directory (screen_dir/CONTENT_DIR) and records browser interactions to an events file, meaning outsider-controlled free text (user-authored HTML/event text) can be ingested by the runtime without selecting a specific item first.