web-scraping-olostep

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The skill’s runtime workflow can ingest outsider-authored free text from public web pages it scrapes/browses (e.g., Create Scrape / Start Crawl / Retrieve Content fetches arbitrary url_to_scrape/start_url content and returns page text to the LLM context for extraction/answering).