qa-testing-accessibility

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow for this skill runs Playwright against target URLs you provide (e.g., generate-a11y-baseline.ts builds url = ${BASE_URL}${path} and visits it, then axe-core extracts violation metadata such as v.description from the rendered DOM), so outsider-authored free text can be ingested via the pages being scanned.