Update app.py

app.py

@@ -273,6 +273,8 @@ Just enter the URL and click **"Auto-Scan Target"**. This automatically runs the
 
 *The scan stops immediately if a vulnerability is found.*
 
+**⚠️ Important:** Auto-Scan defaults to the root URL (`/`). If the app lives on a sub-path (e.g., `/dashboard`) or the homepage is static, **you must still enter it in the Custom Path field below.**
+
 ---
 
 ### 🛠️ Manual Mode