web-perf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). [Exclusion] The workflow ingests only provider-authored instruction text (this skill spec) and then performs DevTools MCP calls against a user-supplied target URL, where the outsider-authored free text exposure is not “POST into a queue/feed the workflow reads” but rather page content from the target site during navigation/trace (i.e., attacker-controlled content requires selecting/controlling a specific page rather than being delivered through an always-monitored outsider text source.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill requires running an external MCP tool via the npx command ["npx", "-y", "chrome-devtools-mcp@latest"], which will fetch and execute remote code at runtime as a required dependency (SKILL.md:24-28).