browser-qa

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime path ingests outsider-authored free text from the public target URL (user-supplied) via agent-browser console/errors/network buffers, which are then serialized into findings.json and rendered into the LLM context for summarization/reporting.