playwright-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md the ad-hoc automation workflow runs arbitrary code written to /tmp/playwright-test-*.js via bun run.js, which reads outsider-provided script text from a user-controlled file/stdin and executes it (free-text injection into the runtime code path).