performing-web-application-penetration-test

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow involves testing arbitrary web application URLs via HTTP requests, where responses from those external sites are ingested by the agent during security assessment, presenting a low-risk indirect prompt injection vector.