yandex-direct-client-lifecycle

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill clearly ingests public, untrusted web content as part of its workflow—e.g., scripts/firecrawl_scrape.py scrapes arbitrary public URLs via the Firecrawl API, scripts/sitemap_probe_batch.py fetches robots.txt and sitemaps from external sites, and build_followup_jobs_from_serp.py and other SERP collectors consume public SERP rows—whose parsed contents are then used to generate follow-up jobs and analysis that drive next actions.