web-scraper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Outsider-authored free text is fetched at runtime from public web pages (user-supplied URLs) via fetch_page()/render_with_playwright() and then converted to Markdown by convert_html_to_markdown(), which is subsequently read/used by the agent (e.g., FULL_DOCS.md / *.md).

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs running Playwright/Chromium with sandboxing disabled (dangerouslyDisableSandbox / --no-sandbox) and saving/reusing authentication cookies, which bypasses security mechanisms and increases risk of compromising the host/session.