audit-website

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent crawls and analyzes arbitrary external websites specified by the user or discovered locally, exposing it to untrusted website content (meta tags, text, headings, and links) via the squirrelscan CLI.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The installation instructions use an unauthenticated shell/PowerShell script execution from squirrelscan.com (curl -fsSL https://squirrelscan.com/install | bash and irm https://squirrelscan.com/install.ps1 | iex) to download and execute runtime code, establishing a weak/unknown external runtime dependency.