crw-map

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow for crw map performs URL discovery by fetching a target site’s sitemap and/or crawling links from the provided URL, so the agent ingests outsider-authored free text (e.g., sitemap.xml contents and discovered page/link text) into the LLM context via the map results.