brainstorming

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source and runtime path: the Visual Companion reads user-supplied browser interaction text from $STATE_DIR/events (written from client-side target.textContent in scripts/helper.js) back into the agent’s next turn per visual-companion.md loop.