scrapecreators-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow uses an API skill to scrape social media content and posts from platforms like Reddit and TikTok where outsiders can author free text, but the agent actively searches or fetches specific items rather than monitoring an incoming unvetted feed.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to make API calls to the ScrapeCreators REST API and fetch OpenAPI specifications from third-party URLs at runtime, which constitutes an operational dependency on an unverified third-party service, resulting in a medium tier.