cyrus-setup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md "Browser Automation" section explicitly instructs using claude-in-chrome or agent-browser to navigate public web UIs (Linear, Slack, GitHub), "scrape credentials," and run commands like agent-browser navigate/eval, so the agent will fetch and interpret untrusted third‑party webpages as part of its workflow.