enhance-ux-laws

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow uses Playwright CLI to open a target web app URL supplied via configuration and execute a DOM probe script against it, which exposes the agent to outsider-authored free text from the rendered pages.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs downloading @playwright/cli@latest from npm via npx during setup/runtime, which is an external registry dependency with mutable versioning provenance.