performing-ot-vulnerability-assessment-with-claroty

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The workflow’s runtime path fetches public web content from CISA (e.g., https://www.cisa.gov/.../known_exploited_vulnerabilities.json) via requests.get(), then parses and uses the resulting JSON fields (readable text) for vulnerability correlation—this is outsider-authored free-form content from a public web source.