org-attack-surface

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests outsider-authored free text by querying and parsing third-party index/search results and registry/CT/scan outputs keyed by user/attacker-provided organization identity (e.g., crt.sh O= JSON, Wikidata SPARQL results, SEC EDGAR search index _source, RIPE/ARIN search responses, Shodan/Censys index results, and promote-to-scan InternetDB host probe data), without any need to “select a specific item” first.