surface-recon

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflow, the agent uses agent-browser to open and interact with user-supplied targets (e.g., “pastes a URL”), and then ingests free text from those pages/bundles and captured network responses (HAR/DOM/HTML) via the browser tool rather than only trusted first-party docs.