preauthenticated-chrome

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). SKILL.md explicitly runs AppleScript that executes JavaScript in the active Chrome tab (e.g., reading document.body.innerText, JSON snapshots of the page, and clicking DOM elements), which means the agent will ingest and act on arbitrary public web pages loaded in the user's browser and thus can be influenced by untrusted third-party content.