playwright-interactive

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). This skill's web-start flow (scripts/playwright_session_snippets.sh web-start emits code that does await page.goto(TARGET_URL)) accepts an arbitrary "web app URL" and the workflow explicitly has the agent read/interpret the live page for functional and visual QA, so untrusted third‑party pages could influence tool use or next actions.