deploy-check

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). In --verify mode, the workflow uses agent-browser open "{url}" and agent-browser js ... to read the remote page’s <meta name="build-version"> (outsider-authored public web/app content fetched at runtime), and also curl -s "{url}/__version" to ingest remote JSON into the agent’s context for parsing/comparison.