firecrawl

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and scrapes arbitrary public web pages and search results (e.g., "firecrawl scrape "" -o .firecrawl/page.md", "firecrawl search ...", and browser/crawl/map commands) and instructs reading its .firecrawl output files, so the agent will ingest untrusted, third-party web content that could contain indirect prompt injection.