Score crawl inputs by SSRF-prone field names and register ping-back canaries for operator paste confirmation.