test-engine

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill instructs running Playwright against user-specified domains (see mda-testing.md --domain parameter and playwright-advanced.md / portal-testing.md which use Preview.PlaywrightAction and raw Playwright to navigate to Power Pages/SPA URLs and inspect DOM and API responses), meaning it will ingest and act on content from external/public web pages that can materially influence test behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The CI/CD examples fetch and execute remote installers at runtime (e.g., Invoke-WebRequest to "https://aka.ms/PowerAppsCLI" and "https://aka.ms/installazurecliwindows" followed by Expand-Archive / msiexec), which executes remote code and are presented as required dependencies for running the tests.