download-webpage-as-pdf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text is ingested at runtime when the workflow runs agent-browser open <URL> and then agent-browser eval(...) over the resulting page DOM (including any user-controlled HTML/text on that page) to strip lazy-load attributes, scroll, and await image decoding before generating /tmp/page.pdf.