browser-testing-with-devtools

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs the agent to read live browser content—DOM nodes, console logs, network responses, and JS execution results—via the Chrome DevTools MCP from arbitrary/public pages (e.g., navigate to URLs), which is untrusted third-party content the agent consumes and uses to drive debugging and follow-up actions, enabling indirect prompt injection.