diagnose-error

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly reads the currently loaded page's browser console and errors (via agent-browser errors / agent-browser console) and captures page screenshots (agent-browser screenshot) as required steps, so it ingests untrusted third-party page content which it interprets to make decisions (e.g., marking diagnostics as critical and aborting).