qa-testing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow instructs the agent to perform web testing and interact with web applications using cmux_browser, which can ingest content and text from arbitrary or target web pages during testing and accessibility checks.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to dynamically inject a script from a third-party CDN (cdnjs.cloudflare.com) into the page at runtime, constituting a weak/unknown/suspicious operational dependency.