hunt-open-redirect

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow never reads HackerOne at runtime; it crawls and fetches a user-specified target site (recon/$TARGET/urls.txt, JS files, live endpoints), whose page content can include outsider-authored user content, so this is arbitrary web content the agent must actively fetch.