hunt-nextjs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow curls the user-specified target's pages, JSON, and HTML (including __NEXT_DATA__), so an agent ingests arbitrary web content that the target may contain user-submitted text in, which is the "arbitrary web pages" case rated low since the agent must actively fetch it.