dev-browser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly directs the agent to navigate and interact with arbitrary public web pages and search results (e.g., "Go to https://example.com", "Search Google for ..."), so the agent will fetch and interpret untrusted third-party content that can influence its subsequent actions.