computer-use

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider free text can be ingested because the required runtime workflow uses the computer_ tool to read arbitrary web page content from the virtual browser (via screenshots/images returned in tool_result), which may include attacker-authored instructions.