modernize-ui

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow renders the user-supplied site's pages with capture.py and reads their manifest, axe output, and screenshots, so an outsider could only reach the agent through public page content such as user comments on a route the agent is pointed at, which it does not select on its own.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (low risk: 0.35). The skill's browser setup runs playwright install --with-deps, which installs system packages and needs root, and it names playwright install-deps "with sudo" as the fix for a missing library, all without asking the user, though it does offer a non-root alternative.