wix-to-react

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow’s “Inventory/Extract content” step uses runtime curl to fetch https://www.example.com/sitemap.xml and a Playwright script to page.goto(url) and then reads page.content() (rendered DOM) from those fetched Wix pages, which is outsider-authored free text/HTML ingested into the agent’s LLM context via the extracted HTML/tokens.