octoparse

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly integrates with Octoparse (“Octoparse is a web scraping tool...”) and instructs the agent to run Membrane actions that return Octoparse data (e.g., "membrane action run ...", "Use when the user wants to interact with Octoparse data"), so the agent will ingest untrusted public web content scraped from third‑party sites that could contain instructions influencing subsequent decisions or actions.