scrape-scrapy-cloud

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The workflow uses the outsider-authored free text returned by the Scrapy Cloud HTTP API (e.g., jobs/list.json and other endpoints) which is printed and then ingested into the agent’s LLM context via the tool output; this content is not authored by the operating user.