hunt-api-misconfig

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required hunt workflow has the agent fetch pages, JavaScript, and API documentation from a user-specified target and read the responses, which can include outsider-authored content, but the agent selects those specific URLs rather than outsiders posting into a feed the workflow monitors.