hunt-xss

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow has the agent probe a user-specified target by fetching and reading its web responses (spidering, curl, browser validation), which are arbitrary web pages where outsider-authored content may appear, so this is low exposure; the github and hackerone_public frontmatter sources were used only to build the skill and are not read at runtime.