yc-jobs-scraper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). At runtime, scripts/scraper.js uses Playwright to fetch outsider-authored web pages (e.g., https://www.workatastartup.com/companies?... and https://www.ycombinator.com/companies/${company.slug}/jobs) and then reads their DOM/embedded JSON via page.evaluate() (e.g., appDiv.dataset.page, job card text), which could contain attacker-controlled free text that would be ingested into the agent’s LLM context if the agent later forwards these extracted strings.