scrape-spec

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required runtime workflow runs /scrape-explore-site to download start/detail/list pages from the target url, and then reads those downloaded pages’ raw.html/rendered.html into /scrape-analyze-page and extract_links.py/extract_values.py, so outsider-authored free text from public web pages is ingested into the agent’s LLM context.