chrome-devtools-mcp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly opens and inspects arbitrary web pages and the user's live Chrome tabs (e.g., new_page { url }, list_pages/select_page, take_snapshot, evaluate_script, and execute_webmcp_tool described in SKILL.md and references/tool-inventory.md), so it ingests untrusted public/webpage content that can materially influence subsequent tool use and actions.