web-e2e

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/e2e.cjs the skill reads user/outsider-authored /.e2e/config.json values (notably auth.probeUrl and auth.loginUrlPattern) and then at runtime issues HTTP requests to that probeUrl and inspects the browser’s probed navigation URL via the local CDP HTTP API (probeAuth → httpJson /json/new + /json/list).