hunt-auth-bypass

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow has the agent spider user-supplied target sites, JS files, and archived pages (wayback) for login surfaces, which are arbitrary web content an outsider can author, and the agent must actively fetch them, so this is low exposure; the cited H1/GitHub/Jira references are builder research sources, not runtime inputs.