scrapling-mcp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Scrapling MCP tools (e.g., fetch_page, fetch_dynamic, fetch_stealthy) retrieve arbitrary web page HTML from a user-provided url, and that page text/HTML is then consumed for extraction via css_select/xpath_select, creating an indirect prompt-injection exposure path.