capture

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Tier 1/2/3 all fetch or render user-supplied URLs at runtime (public web pages via Microlink API or Chrome navigation/screen-capture), so any page text/DOM content can include outsider-authored free text that becomes LLM-readable context through the browser/extension tooling.