firecrawl-company-directories

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md Firecrawl Collection Plan explicitly instructs the agent to browse and scrape public third‑party directories (e.g., "YC companies, Crunchbase, Product Hunt, G2, or any custom directory URL") and to follow profile pages and pagination, so untrusted public web content is fetched and interpreted as part of the workflow.