slideshow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, the standalone wrapper’s <hyperframes-slideshow> reads and ingests the slideshow “JSON island” from the wrapper’s own innerHTML via <script type="application/hyperframes-slideshow+json"> (which is user-supplied deck source content the attacker authors in the project files).