playwright-browser-console-messages

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly documents a tool ("browser_console_messages") that returns all console messages from the current page (via dev-swarm.request), meaning the agent ingests untrusted third-party web page console output that could contain attacker-controlled instructions.