chrome-devtools-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly lets the agent open arbitrary URLs (navigate_page / new_page), take text snapshots of pages (take_snapshot), evaluate scripts, and inspect network/response bodies (get_network_request), so it fetches and ingests untrusted public web content that can steer subsequent clicks/fills/actions.