dev-browser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). At runtime the skill’s required workflow uses dev-browser to page.goto(<URL>) and then reads/scrapes the resulting page content (public web content authored by outsiders) into the agent via console.log/stdout, which becomes LLM-readable context.