construction-sweep

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is ingested from public web content scraped at runtime—Firecrawl batch results (<county>_fc.json from scripts/pull_firecrawl.py calling https://api.firecrawl.dev/v1/batch/scrape/<batch_id>) and then merged into the LLM context via append_county.py/merge_helpers (e.g., markdown → services_summary, extract_years, extract_licenses).