chrome-cdp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime reads outsider-authored free text only if the caller supplies it via CLI args into the required page-monitoring/evaluation workflow (e.g., scripts/cdp.mjs eval <target> <expr>, html <target> [selector], nav <target> <url>, type <target> <text>, and evalraw <target> <method> [json]), and there is no built-in ingestion of any external monitored feed/queue content.