perf-expert

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs running site audits against arbitrary public URLs (e.g., "npx lighthouse https://yoursite.com", "npx unlighthouse --site https://site.com", "npx pa11y https://site.com"), meaning the agent will fetch and interpret untrusted, user-provided web content.