discord-x-follower-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow uses Chrome DevTools MCP to open arbitrary Discord member profile dialogs and then extract text (Discord usernames and X Connections links / relationship UI text) from pages operated by Discord/X that are not authored by the operating user, so outsider-authored free text is ingested into the agent’s runtime/browser-to-LLM context via the browser scraping/extraction steps (SKILL.md:11-13, references/browser-workflow.md:46-60, 120-127).