playwright-compress

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's PostToolUse hook explicitly compresses "MCP tool response (37K+ chars)" from mcp__playwright__.* / mcp__claude-in-chrome__.* (Playwright/Chrome) outputs—i.e., browser-scraped/public web content—which the agent preserves and ingests (via haiku summarization) as part of its workflow, so untrusted third‑party page content can influence subsequent actions.