meticulous-cli-simulate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's runtime explicitly loads and replays a recorded session in a Chromium browser against an arbitrary URL via the "Replay Target" --appUrl= option (SKILL.md), which means it fetches and displays untrusted public web content that the replay/debugger will read and use to drive actions and screenshots; this exposes the agent to indirect prompt injection from third-party pages.