browser-automation
Warn
Audited by Snyk on Aug 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Skill “browser-automation”/Workflow 1/2/3 ingests page-rendered text from user-provided target URLs via Playwright navigation (e.g.,
await page.goto(url, ...)thenextract_listings(...)/text_content()), so outsider-authored content on those pages is LLM-visible at runtime.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata