web-extract
Warn
Audited by Snyk on Aug 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). web-extract ingests outsider-authored free text at runtime by accepting user-supplied URLs/queries for endpoints like POST /scrape (page content), POST /search (SERP snippets/deep-scraped pages), and especially POST /crawl + GET /crawl/{job_id} (recursive crawling of the supplied seed domain), which will include attacker-controlled content when the user chooses attacker-posted pages to crawl or scrape.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata