universal-scraping-architect

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Outsider free text is ingested at runtime when the required workflow fetches a public URL (Mode 1 Firecrawl app.scrape_url(TARGET_URL, ...) or Mode 2 requests.get(TARGET_URL, ...)), and the returned scraped markdown/HTML becomes LLM-readable context via subsequent validation/token-budget steps.