browser-extension-tests

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow uses Playwright’s launchPersistentContext to load and then navigates the browser to chrome-extension://{extensionId}/popup.html and to an external page (https://example.com/) where the extension’s content script runs, so outsider-authored free text could be ingested from that visited site via normal DOM/script behavior.