agent-cli-hint-completion

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly runs microsoft/playwright-cli (playwright-cli open/goto) to navigate to arbitrary public URLs (example: https://www.google.com) and returns page content (Page Title, Snapshot), so the agent fetches and reads untrusted third‑party web pages as part of its workflow, allowing page content to potentially influence actions.