DOM Parser for Playwright Selector Generation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly requires generating JavaScript to "parse and filter webpage HTML" (SKILL.md: "Generates JavaScript code to parse and filter webpage HTML"), which implies ingesting arbitrary public web pages (untrusted third-party content) that the agent will read to generate Playwright selectors and thus could influence subsequent tool actions.