claude-browser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly exposes browsing and ingestion of arbitrary web pages via tools like navigate, read_page, and get_page_text in the user's actual browser, so untrusted third-party (public webpages/social content) can be read and influence subsequent automated actions.