scrape

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow invokes /scrape-define and /scrape-spec, which download and analyze user-supplied target pages (public web content) and then use extracted HTML/text as LLM context during schema/spec generation, enabling indirect prompt injection from outsider-authored page content.