firecrawl-monitor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Firecrawl monitor performs runtime web fetching/scraping of user-specified URLs (page/crawl/scrape-urls) and, for web monitors, runtime search results; the fetched page text/search result snippets are then ingested into the agent’s LLM for change judging, which is outsider-authored free text from arbitrary third-party sites.