webapp-testing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Skill runtime ingests free text only from whatever local web application the user’s Playwright script navigates to (e.g., page.content(), page.locator(...).all(), and console messages in the example), not from any trusted first-party provider, so outsider-authored content is reachable when the attacker controls that app’s rendered DOM/text.