wang-ke

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime path uses Selenium (scripts/browser_keeper.py keep_alive: driver.get(args.url) then driver.find_elements/execute_script on the loaded page’s DOM and video elements, and the skill’s typical trigger allows the user-supplied URL to load arbitrary third-party page text/JS-controlled DOM into the LLM runtime).