steel-browser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow uses steel browser navigate/open to fetch arbitrary user-supplied URLs and then ingests the resulting page DOM/accessibility tree via steel browser snapshot (element text/attributes become LLM-readable context), which is outsider-authored free text from public web content.