burp-suite-testing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). At runtime, the skill instructs the user to use Burp’s embedded/external browser to navigate to a target URL and then read intercepted HTTP request/response bodies from Burp’s “Proxy > Intercept” / “Proxy > HTTP history” into the LLM context; those responses are outsider-authored free text from the target web application (and any third-party resources loaded during browsing).