playwright-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In-browser content from the target page is ingested at runtime via Playwright snapshots/eval (e.g., “After each command, playwright-cli provides a snapshot of the current browser state” and playwright-cli find/eval operate over DOM text), so outsider-authored text in the visited page can be read by the LLM/agent.