auditing-tls-certificate-transparency-logs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow queries the public crt.sh API and CT log servers, where anyone can register arbitrary domain names and include untrusted free text in certificate fields (like common names and Subject Alternative Names) that are ingested by the agent.