playtest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The playtest scripts execute a browser automation tool against a user-specified local or remote game URL/slug supplied at runtime, meaning any untrusted web content loaded from that source is outside the first-party boundary.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill uses agent-browser (from GitHub repository vercel-labs/agent-browser) as an operational runtime browser-automation CLI dependency.