web-browser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The web browser skill navigates to arbitrary web pages and evaluates JavaScript or captures content selected by the agent or user, ingesting outsider-authored free text from web pages (low risk per scoring rules since URLs/pages are actively fetched/searched rather than passively monitored like an email queue).