stagehand-automation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly navigates to and scrapes public websites (e.g., stagehand.page.goto("https://news.ycombinator.com") and the "Web Scraping: Extract data from any website" use case) and uses extract()/observe() to read and interpret that untrusted, user-generated third-party content.