web-scraper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill (SKILL.md and scripts/scrape.py) explicitly fetches and parses arbitrary public web pages (e.g., scripts/scrape.py's fetch_page uses requests.get on user-supplied URLs and SKILL.md shows examples like scraping https://en.wikipedia.org/…), and it reads that untrusted, user/public-generated content (including following pagination/get_next_url and extracting fields) as part of its workflow, which can materially influence subsequent scraping and tool actions.