web-testing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs the agent to navigate to and interact with arbitrary web pages (e.g., page.goto('https://example.com'), chrome.navigatePage('https://example.com/login'), chrome.evaluateScript(...), snapshot-based element finding and clicking), which means it fetches and interprets untrusted public page content that can directly influence subsequent tool actions and decisions.