hunt-ssrf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow has the agent send crafted requests to a user-specified target and read the response bodies and OOB callbacks, which is actively fetching arbitrary, user-supplied web content that an outsider could have authored, so it falls under low rather than medium since no outsider can force delivery into a monitored queue.