replay-mcp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly inspects the contents of https://replay.io recordings, which capture arbitrary web pages and user interactions from the open web, so the agent would read and interpret untrusted third-party content from those recordings as part of its workflow.