agent-browser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly automates browsing and scraping of arbitrary external websites (e.g., agent-browser open , snapshot -i, get text body in SKILL.md and templates/capture-workflow.sh / form-automation.sh), so untrusted third-party page content is fetched and interpreted as part of the agent's workflow and can influence subsequent actions.