playwright-scraper-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's scripts (scripts/playwright-simple.js and scripts/playwright-stealth.js) and SKILL.md/examples explicitly navigate to and scrape arbitrary public websites (e.g., https://m.discuss.com.hk/#hot), evaluate document content, extract HTML/text/links, and return JSON used by downstream code, so untrusted third‑party content can be ingested and materially influence agent behavior.