ccc-testing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The qa and qa-only skills (see qa/SKILL.md and qa-only/SKILL.md) explicitly run a browse binary ($B goto, $B snapshot, cookie-import) and WebSearch against user-provided or public URLs as part of their required workflow, meaning the agent fetches and interprets arbitrary third‑party web content which can directly influence testing actions and decisions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The qa/qa-only setup explicitly runs a remote installer via "curl -fsSL https://bun.sh/install | bash" if bun is missing to build the browse binary used at runtime, which fetches and executes remote code (https://bun.sh/install).