clean-code

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's "Verification Scripts" include commands that accept arbitrary URLs (e.g., lighthouse_audit.py <url> and playwright_runner.py <url>), meaning the agent may fetch and run audits against untrusted public websites and must read/interpret that output.