mock-hunter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md describes using Playwright to navigate to a user-supplied live URL and then “Inventory”/“Trace Provenance” by reading the page’s DOM and network responses, which are outsider-authored free text (the target website’s content) that the agent will ingest into LLM context for reporting.