prices-and-plans

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow actively searches and scrapes arbitrary seller, store, and review pages through Firecrawl (firecrawl_search, firecrawl_scrape), so outsider-authored listing and review text enters the agent's context only after it selects those pages, which makes this low rather than medium.