senior-security

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The pentest_automator.py workflow explicitly accepts arbitrary target URLs (e.g., --target https://example.com) and performs automated reconnaissance and web application testing, so the agent will fetch and interpret untrusted public web content during its run.