managing-pi-hole

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required Discovery and Analysis phases read Pi-hole's live query log (getAllQueries) and top-domain lists, which contain domain names that any remote site or DNS-querying process can cause a client to request, so an outsider can write attacker-chosen strings into a feed the workflow consumes without the agent selecting anything.