webflow-mcp:asset-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Required workflow ingests outsider-authored content from the user’s Webflow site assets—specifically asset filenames and existing alt text plus image previews via get_image_preview—which can contain arbitrary, potentially attacker-controlled free text into the agent’s LLM context.