integrated-browser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow exposes outsider-authored free text via “live page” content treated as untrusted model input when agents attach to a browser tab (Playwright/CDP drives the same WebContentsView and screenshots are used to convey page content to the renderer/agents), so the agent ingests arbitrary page-authored text.