scrape-create-spider

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow reads and uses outsider-authored free text from public web pages at runtime: the spider follows nav_item.items/pagination/subcategories URLs and then calls page.to_item() / nav.to_item(), which (via Scrapy downloads and/or Zyte API browser rendering) ingests the fetched page content into the LLM context through the page objects’ extraction logic.