opencli-browser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly opens and scrapes arbitrary public websites via "opencli browser open " and example flows (e.g., "open https://news.ycombinator.com") and then uses "state", "eval", and "network" to read/interpret page and API content as part of its workflow (including adapter generation/verify), so untrusted third‑party content can materially influence agent actions.