demo-from-url

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow fetches arbitrary public web content at runtime by navigating to a user-supplied URL (page.goto('YOUR_URL') / page.content()), which can include outsider-authored free text that may be ingested into the agent’s LLM context during discovery/spec generation.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's runtime Playwright script navigates to the user-supplied URL (e.g., http://localhost:3000 or the provided YOUR_URL via await page.goto('YOUR_URL') and page.content()) and uses the fetched HTML to generate the demo YAML and action steps, so the external page content directly controls the agent's produced instructions.