potion-yjs-dev-browser-test

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The workflow drives a live “dev-browser” connected to a persistent Chrome and opens Potion pages at runtime; the LLM will ingest the Potion page’s rendered/document text (outsider-authored web content) via browser page reading/logging, creating an indirect prompt-injection surface.