threat-modeling-mindmap

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). This skill’s required workflow includes runtime passive crawling of a user-supplied target domain (e.g., katana, gau, waybackurls) and extracting JS/endpoints from fetched web content, which can ingest outsider-authored free text (public web pages/JS) into the agent’s LLM context via the generated crawl/mind-map inputs.