chrome-extension-dev

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). SKILL.md's "Reload-test loop" (steps 2–4) explicitly directs the agent to navigate to arbitrary test pages and use mcp__claude-in-chrome__read_page and javascript_tool to inspect and act on page DOM, meaning the agent will ingest and act on untrusted public web content that could carry injected instructions.