hunt-nosqli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow runs curl requests against a user-supplied $TARGET and reads the HTTP responses, which is an actively fetched, arbitrary target URL rather than a monitored queue, so the exposure is low; the hackerone_public reference in the frontmatter describes the skill's origin, not a runtime fetch.