perf-bottleneck-finder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's required workflow (SKILL.md Phase 2 and the scripts/measure_page_performance.py entrypoint) instructs the agent to visit an arbitrary --url and uses browser_evaluate/PERFORMANCE_SCRIPT to ingest performance.getEntriesByType('resource') and API request data from that public page, which the skill then interprets to drive bottleneck analysis and subsequent actions—i.e., untrusted third‑party content is fetched and directly influences decisions.