cmux-browser-navigating

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill takes a user-supplied <url> and uses cmux browser ... navigate <url> / open-split <url>, which at runtime causes the browser to fetch and ingest the page’s body text (public web content) into the agent’s LLM context, creating an indirect prompt-injection path via outsider-authored web content.