vite-browser-core-debug

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly opens arbitrary web apps via "vite-browser open " and then reads runtime/errors/network/screenshot/eval output from that target page (see Workflow and Command sequence), so untrusted third-party page content can be ingested and directly influence routing/decisions and subsequent tool use.