dns-email-auth

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The workflow runs dig to fetch DNS TXT records (SPF/DKIM/DMARC) from the user-supplied domain; these are outsider-authored public DNS content that the agent reads as free-form text at runtime (e.g., dig +short TXT "$DOMAIN" and dig +short TXT "$s._domainkey.$DOMAIN").