red-team-tools

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow runs public recon tools (e.g., waybackurls target.com, gau target.com, and curl to bgp.he.net) that fetch third-party web content at runtime; that fetched free-form page text/URL data can be ingested into the agent’s LLM context via the pipeline outputs (e.g., URLs/response-derived text).