firecrawl

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider source: Firecrawl search/scrape/map/crawl/browser fetches public web pages at runtime and converts them to readable markdown/JSON (e.g., page body text) that can be ingested into the agent context unless strictly file-isolated; the workflow explicitly performs web fetching based on user-provided queries/URLs.