building-adversary-infrastructure-tracking-system

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent queries external certificate transparency logs, threat intelligence APIs (URLhaus, ThreatFox, SecurityTrails), and passive DNS services using seed IOCs provided at runtime, resulting in low exposure to outsider-authored free text retrieved from those sources.