building-threat-intelligence-feed-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests threat intelligence from external public feeds (TAXII servers, Abuse.ch URLhaus, and Feodo Tracker) where third parties can publish arbitrary data fields such as descriptions, threat notes, or tags.