daytona-chrome-cdp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime workflow only launches/controls a first-party provided Chrome sandbox (CDP URL generated from that sandbox) and uses attacker-supplied navigation inputs (e.g., DEN_WEB_URL, UID, VALUE) but does not describe any ingestion/reading of outsider-authored free text outside of the user-provided target web content via the browser tools, so there is no explicit queue/feed/ticket/comment reading path.