ui-aesthetic-best-practices

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow can ingest outsider-authored free text when the user has only live websites and the agent “build[s] a reference board from 3-5 sources” (i.e., runtime-fetched public web content or scraped page text used as reference material).