mapping-mitre-attack-techniques

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow uses curl to download a MITRE ATT&CK STIX bundle from a public GitHub repository, which is an external source of data that could potentially contain prompt injection risks if untrusted, but GitHub repositories hosting structured JSON data bundles are categorized under low risk (fetching public files/registries/URLs).