game-qa

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's Playwright MCP instructions (playwright-mcp.md) explicitly tell the agent to "try calling browser_navigate to any URL" and to inspect a third-party Play.fun iframe (querying iframe[src*="widget.play.fun"]), which requires fetching and interpreting untrusted public web content as part of the agent's inspection workflow and could influence its next actions.