antithesis-agent-browser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, antithesis-agent-browser uses agent-browser to open and then inject assets/antithesis-agent-browser.js into arbitrary Antithesis report/runs/logs pages, and that injected runtime reads free-text content from the loaded DOM (e.g., report titles/metadata, properties/findings text, log event text, and error details) into the agent workflow.