performance-budget-setter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's Synthetic Monitoring and CI examples explicitly run Lighthouse CI (lhci autorun) and call the WebPageTest API (curl "https://www.webpagetest.org/runtest.php?url=..."), which fetch and analyze arbitrary public URLs (untrusted third‑party content) as part of the monitoring workflow.