k6-docs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow’s documentation visual verification uses agent-browser to open and scrape text from pages served by a local docs server (http://localhost:3002), which can include user-authored/outside-submitted doc content from checked-out branches.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs the agent at runtime to WebFetch the Playwright docs page which would be fetched and used to shape prompts/instructions: https://playwright.dev/docs/api/class-page#page-wait-for-event