firecrawl-scraper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to fetch and ingest arbitrary public webpages via the Firecrawl API (e.g., /v2/scrape and /v2/crawl and the Cloudflare Workers fetch example calling https://api.firecrawl.dev/v2/scrape), so untrusted third‑party web content is read and used to drive extraction and downstream actions.