subdomain-takeover

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Step 2/3/4/5/6 ingest outsider-authored free text via SECSKILL_SUBDOMAIN_LIST (a user-provided file of subdomains) which is then iterated for DNS resolution (dig) and HTTP probing (curl/httpx/subjack/nuclei), i.e., an outsider can supply arbitrary strings into the monitored input source the workflow consumes without prior item selection.