webapp-testing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow executes scripts/playwright_runner.py <url>, which uses Playwright to fetch and render an OUTSIDER-supplied arbitrary URL (page.goto(url, ...)) and then reads page content (e.g., page.title(), page.locator(...), page.evaluate(...)) into the JSON returned to the agent—this is indirect prompt injection via arbitrary web page text.