web-browser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly lets the agent navigate to and interact with arbitrary public web pages (e.g., ./tools/nav.js https://example.com and evaluate JS/screenshot commands), so it fetches and consumes untrusted third‑party website content that could carry indirect prompt injections.