firecrawl-deep-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md instructs using Firecrawl to “search and scrape … sources” (public web pages) and then deliver a “rigorous, cited synthesis,” which implies scraped outsider-authored free text is ingested into the agent’s LLM context for synthesis.