core-web-vitals

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow navigates to an outsider-supplied URL and then runs mcp__playwright__browser_evaluate, which reads lastE.element.outerHTML (and potentially lastE.url) from the loaded page—i.e., free-form HTML authored by an external site—into the agent’s LLM context via the returned report snippet.