webpagetest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill uses the WebPageTest API to run a test for a provided URL and then ingests the resulting fields like results.data.url, results.data.summary, and results.data.runs[1].firstView.requests (waterfall), which can include externally authored page content/requests that an outsider can supply via the URL to be tested.