playwright-local

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly builds Playwright scripts that navigate and scrape arbitrary public websites and API responses (see Step 1 and Example 1 scraping https://example-store.com/electronics), thereby ingesting untrusted third-party web content that the agent reads and interprets.