hunt-host-header

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow sends HTTP requests to a user-supplied target and reads its responses, which is arbitrary-web-page-style fetching where an outsider could publish content but cannot force delivery into the agent's path, so this is low rather than medium.