Scraping Best Practices

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill directly fetches and processes arbitrary public web pages (e.g., requests.get(url), page.goto(url) / page.content() in scrape_dynamic_page, and HTML parsing functions like extract_with_css), so it ingests untrusted third-party content from the open web that could carry injected instructions.