source-command-e2e-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow uses mcp__playwright__browser_navigate to open a “product URL” and then browser_snapshot/other Playwright steps, which can ingest outsider-authored free text from public web pages or third-party content loaded at runtime into the agent’s LLM context.