web-security-architect

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow can ingest outsider-authored free text when the user supplies an arbitrary URL, since audit_web_security_basics.py fetches the page body and parses HTML/inline scripts at runtime (e.g., body_text = response["body"].decode(...) and html.feed(body_text)).