develop-web-game

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The Playwright client (scripts/web_game_playwright_client.js) navigates to an arbitrary --url via page.goto(args.url) and the SKILL.md workflow requires the agent to read/inspect screenshots and the page-provided window.render_game_to_text, so untrusted third-party webpage content can be ingested and materially influence the agent's decisions and next actions.