webapp-testing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's scripts (e.g., scripts/smoke_test.py and scripts/test_webapp.py, plus example scripts like examples/element_discovery.py) explicitly accept arbitrary --url values, visit and crawl pages, capture page content/console logs, and perform interactions (click/fill) and follow internal links, so untrusted public or user-provided web pages can be fetched and their content read and acted upon during the workflow.