performance-profiling

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The script scripts/lighthouse_audit.py invokes Lighthouse on a user-supplied URL (e.g., python scripts/lighthouse_audit.py https://example.com) and parses the generated JSON report, which means it fetches and ingests arbitrary public website content (untrusted third-party data) as part of its workflow.