stitched-full-page-capture

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/stitch_full_page_capture.mjs, the runtime reads free text content only indirectly by opening attacker-supplied item.pageUrl in Playwright and evaluating page DOM/scrollHeight (page.goto → page.evaluate), so outsider-authored page content can be ingested without selecting a specific item beyond accepting the manifest.