accessibility-auditing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly directs the agent to open arbitrary target URLs with browser_navigate and to ingest the page's aria/accessibility tree via browser_snapshot (the page content/screenshots), so it consumes untrusted third-party web content that can influence auditing decisions and actions.