cloakbrowser-fallback

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). At runtime the required workflow loads an outsider-supplied URL (e.g., node scripts/cloak_fetch.mjs <url> / python scripts/cloak_fetch.py <url>), then reads and prints page.innerText("body") and optionally page.content() (HTML) from that fetched page into the agent’s LLM context via the script’s stdout.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill lists npm tarballs that are fetched to install runtime dependencies (e.g., https://registry.npmjs.org/cloakbrowser/-/cloakbrowser-0.3.31.tgz) and the cloakbrowser installer will also download and run a remote Chromium binary, so external code is fetched and executed as a required dependency.