bb-browser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). bb-browser’s runtime workflow can ingest outsider-authored free text from public web pages it opens/fetches (e.g., via bb-browser open <url> / bb-browser fetch <url> or adapters that load third-party sites), which the browser/JS then reads into LLM-visible output.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). bb-browser's runtime command bb-browser site update pulls community adapter JavaScript files from the external "bb-sites" repository (community adapters) which are fetched at runtime and executed as adapters, meaning remote JS code from the bb-sites repo can directly run in the agent's context.