playwright-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md + run.js execute arbitrary browser automation (node run.js reads an outsider-provided script/code path such as stdin/inline) and that automation can ingest free text from visited pages via page.goto/extractTexts/extractTableData, so outsider-authored content can reach the runtime through the attacker-controlled code/parameters.