firecrawl-scrape

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow is “scrape one or more URLs” (including optional --query), which at runtime fetches public web page content from user-supplied URLs and feeds the extracted markdown/text into the agent/LLM context, creating an indirect prompt-injection risk from outsider-authored web content.