dev-browser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly navigates and scrapes arbitrary public websites (e.g., page.goto("https://example.com"), the scraping.md guidance, and getAISnapshot/selectSnapshotRef usage with a Hacker News example), so the agent will fetch and interpret untrusted, user‑generated third‑party web content.