chrome-extension

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly describes using content_scripts and host_permissions (e.g., "host_permissions": ["https:///"], "<all_urls>") and accessing page DOM, which means the extension will load and read arbitrary public web pages (untrusted third‑party content) as part of its workflow.