agent-browser-debug

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly instructs the agent to open arbitrary URLs ("agent-browser --headed open ") and inspect page/network response bodies ("network request ", DOM snapshots, HARs), meaning untrusted third‑party web content can be fetched and read and thus could materially influence debugging decisions or next actions.