design-email

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Phase 2 and Phase 6 call firecrawl:firecrawl_search with sources: [{ "type": "web" }], which requires the runtime workflow to fetch and ingest outsider-authored free text from arbitrary web pages based on a query.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The Supabase Edge Function example imports runtime code from 'https://deno.land/std/http/server.ts' and the package specifier 'npm:resend', which are fetched and executed at runtime and thus are required external runtime dependencies.