agent-browser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow uses agent-browser open <url> and subsequent snapshot/console reads the page’s accessibility tree and console/network text at runtime from an outsider-provided URL, which is untrusted free-form content that the LLM may ingest indirectly.