agent-browser-core

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). references/agent-browser-workflows.md explicitly instructs the agent to "open " and then "snapshot -i" and act on page refs, which means the agent fetches and interprets arbitrary public web pages (untrusted third-party content) as part of its automation loop and that content can influence subsequent actions.