whatweb

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's workflow explicitly runs WhatWeb against arbitrary public websites (e.g., "whatweb https://example.com", "whatweb -i live.txt", and the pipeline steps scanning discovered hosts), meaning the agent fetches and ingests untrusted third-party web content that can influence subsequent scanning actions and decisions.