nostr-wot

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow queries public APIs (wot.klabo.world and maximumsats.com) for trust scores and metrics associated with specific public keys provided as arguments, without continuously monitoring or ingesting untrusted public feeds.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The script queries external API endpoints (wot.klabo.world and maximumsats.com) at runtime to fetch trust scores and network reports, which constitute inbound operational dependencies.