agent-e2e

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's "Comparing with Live Behavior" workflow explicitly instructs the agent to navigate to and read a public site (https://home.st44.no) using navigate/read_page, meaning it fetches and interprets untrusted third‑party web content that can influence test decisions.