browser-record

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent opens an arbitrary URL supplied via arguments, ingesting external web page content during the browser session.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill executes npx -y ruvector@0.2.25 and npx -y @claude-flow/cli@latest at runtime to fetch and run remote packages from npm registry without a verifiable publisher or pinned integrity check, creating an unverifiable runtime external dependency.