fix-broken-scraper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Outsider-authored free text is ingested at runtime only insofar as the workflow fetches the user-supplied target URL’s HTML and uses its visible/body/embedded content (e.g., in scripts/diagnose.py fetch() → looks_blocked()/name_vendor()/find_embedded_json()/visible_text() → classify()), so the text being classified comes from external pages chosen by the user.