ctf-web

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The “CTF Web” skill operates on user-provided website/API/source bundles and performs runtime enumeration/testing of user-controlled HTTP inputs (e.g., Lane B/C/D fuzzing and injection probes), so it can ingest outsider-authored free text delivered via requests into the target’s inputs.