performance-profiling

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The script scripts/lighthouse_audit.py runs Lighthouse on arbitrary, user-supplied URLs (e.g., python scripts/lighthouse_audit.py https://example.com), fetching and parsing audit reports derived from public web pages, so the skill consumes untrusted third-party content.