comet-browser-testing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Phase 2 uses the Comet MCP tool mcp__comet-bridge__comet_ask(prompt=...), where the runtime prompt includes the outsider-provided {URL} (and {EXTRA}) that can point to arbitrary web content; Comet then reads that fetched page text and returns it into the LLM context for reasoning.