recon-a-domain-passively

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow “Recon a domain passively” ingests outsider-authored free text via its steps that read third-party and community content about the target’s estate (e.g., read-deleted-pages, google-like-a-spy, and secrets-in-git-history in Step 6), where those pages/repo contents can include attacker-supplied prompt-injection text.