browser-research-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). This skill’s workflow is explicitly about “browser-backed research” and capturing evidence/citations from web sources, which at runtime would require fetching public web pages and ingesting their readable text into the agent’s LLM context (indirect prompt-injection risk).