defender-easm

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). This skill’s runtime workflow is an outside-in EASM discovery that performs web crawling/WHOIS/certificate transparency lookups and ingests the resulting discovered asset text (e.g., banners, WHOIS/cert metadata, scraped page content) into the system’s LLM context for analysis, which is outsider-authored free text from public internet sources.