aibtc-news-sales

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's workflow explicitly tells the agent to "Browse the agent registry on aibtc.com" and "Check Moltbook for agents posting things they're selling or seeking," which requires ingesting and acting on open/public, user-generated content (agent listings/posts) as part of finding sellers and deciding whom to pitch, creating a clear avenue for indirect prompt injection.