agent-browser-jev

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads visible browser state and accessibility snapshots from an existing browser session during UI automation, which can contain outsider-authored web page content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill package installs @openrouter/sdk from npm (https://registry.npmjs.org/@openrouter/sdk) via npm ci as an operational runtime dependency, which is a common/reputable unofficial transporter/registry path for the official OpenRouter SDK package.