dast-ffuf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow is web fuzzing/enumeration (e.g., “Directory and File Enumeration”, “Virtual Host and Subdomain Discovery”, “Authentication Endpoint Fuzzing”) which necessarily fetches target HTTP responses and may ingest response body text into the agent’s LLM context for analysis (indirect prompt injection via attacker-controlled web content).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The CI workflow contains a runtime command that fetches and executes a remote script: "curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash", which downloads and runs external code as a required dependency.