browser-automation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads the state and page content of a locally running Electron/Chrome DevTools Protocol browser target (e.g., via browser_list/browser_eval/browser_snapshot on http://127.0.0.1:9823), which can contain outsider-authored free text if that UI/page is influenced by users.