browser-trace

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime path attaches to a CDP-driven browser target and passively ingests page-controlled free text via the CDP firehose and sampler (e.g., cdp-firehose.mjs streams onEvent JSON for all enabled domains, and snapshot-loop.mjs reads document.body.outerHTML and location.href), so outsider-authored page content can be written to cdp/raw.ndjson/dom/*.html before any “specific item” selection.