core-web-vitals

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill's workflow instructs running Lighthouse and related tools against arbitrary public URLs (e.g., "npx lighthouse https://example.com" and parsing audits with jq), which causes the agent to fetch and analyze untrusted third-party web content that it must read/interpret.