web-pentest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The pentest [URL] trigger leads to runtime ingestion of outsider-authored free text via scripts/recon-scan.sh, which curls the operator-supplied target URL (including robots.txt, sitemap.xml, and .well-known/security.txt) and writes the fetched contents to evidence files for the agent to analyze.