use-browser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). This skill’s runtime workflow uses Playwright to navigate to user-specified web pages/URLs and interact with the resulting DOM; any fetched page content is outsider-authored free text that can be ingested into the LLM context via DOM snapshots like page.content() / page.$$eval().