attack-surface-mapping

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow instructs the agent to analyze client-side application assets, such as JavaScript files, chunks, sourcemaps, and API responses, which can contain outsider-authored text when consuming arbitrary web application content.