sitemap-discovery-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The runtime workflow primarily ingests outsider-authored free text fetched from arbitrary public site content (e.g., curl -s "$SITE/robots.txt" and curl -s "$SITE/sitemap.xml" and extracting <loc>/<lastmod> from it), which is then processed/used as LLM context via the audit findings/output rather than being purely structured internal data.