app-testing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow uses Playwright MCP tools to navigate to and interact with arbitrary user-provided or remote web pages (localhost or remote live sites), which exposes the agent to outsider-authored free text from web page content.