hunt-aspnet

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow fetches and reads responses from a user-specified target ASP.NET application (error bodies, form HTML, trace/elmah pages), which is an arbitrary web target the agent must actively probe rather than an inbox or feed an outsider can force into the workflow, so outsider text is reachable only after the agent selects the source.