apify-deploy-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Next.js API route (app/api/scrape/route.ts) and scheduled pipeline (Step 5) explicitly accept or start scrapes of arbitrary public URLs and then ingest/process the resulting dataset items (and the webhook handler processes those scraped items), meaning it fetches and acts on untrusted third-party web content.