recon-a-domain-passively

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests outsider-authored free text at runtime by reading GitHub repository contents in secrets-in-git-history (Step 6) and by scraping/indexed content from the wider web via read-deleted-pages/google-like-a-spy, without requiring the attacker to provide it only indirectly through a first-party trusted source.