x9-browser-session

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to browse arbitrary web pages and search results via browser control tools (such as chrome-devtools MCP and agent-edge), exposing it to low-risk indirect prompt injection from fetched web content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill configures the execution of chrome-devtools-mcp@latest via npx from the npm registry, which represents a runtime external dependency from an unpinned common/reputable unofficial registry source.