e2e-testing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Planner/Generator/Healer explicitly open and snapshot live web pages (e.g., "Planner: explore http://localhost:3000/dashboard" in references/playwright-agents.md and the Planner/Generator/Healer invocation patterns in rules/spec-first-flow.md, plus the MCP tool catalog's browser_navigate/browser_snapshot), so the agent ingests untrusted third-party page content (accessibility-tree/snapshots) and uses that content to choose locators and drive test-generation and healing actions.