playwright-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent navigates to and interacts with arbitrary web pages via browser automation tools (playwright-cli goto, open), ingesting untrusted web content and snapshots into its context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The npm installation command references @playwright/cli, which is an unofficial third-party wrapper package rather than the official Playwright project (@playwright/test or playwright), constituting a medium-tier common unofficial operational dependency.