playwright-automation-fill-in-form

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to navigate to and interact with a public Microsoft Forms URL (https://forms.microsoft.com/url-of-my-form), meaning it will fetch and interpret user-generated/untrusted form content as part of its workflow, which could contain instructions that influence subsequent actions.