A Nuclei Template that checks if a website is running Salesforce Lightning and then attempts to see if guest users are authorized to retrieve files
This should work fine with Nuclei, and a medium-severity item should be returned if successful. You may disagree with having a medium severity for something informational like this, but that's a personal choice because I always want to check out websites that hit on this check.