aicoin-market

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow (SKILL.md) instructs the agent to run scripts that call AiCoin OpenData endpoints—notably scripts/news.mjs, scripts/newsflash.mjs and scripts/twitter.mjs—which ingest public news and Twitter/X content (user-generated/open-web) that the agent must read and use to inform signals/decisions, creating a clear vector for indirect prompt injection from untrusted third‑party content.