storybook

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly drives a browser against Storybook URLs (rules/playwright-cli.md Phase 5) and runs a Playwright login script against configured loginUrl values from auth.config.json (rules/auth.md), so it fetches and interprets potentially public/untrusted web pages as part of its required workflow (render checks, selector discovery, storageState handling) which could let page-provided content or DOM elements materially influence tool decisions and next actions.