agent-first-screenshots

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/capture-verify.mjs, the runtime executes a user-supplied JavaScript expression via Runtime.evaluate from spec.preCapture immediately before Page.captureScreenshot, creating an injection path for outsider-provided free text into the app context.