alpaca-broker-sse-events

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow for this skill consumes Alpaca Broker SSE text/event-stream frames (e.g., GET /v1/events/accounts/status, /v2/events/trades, etc.) whose data: payloads are authored by Alpaca (an external party), so outsider-authored free text/JSON is ingested into the agent’s LLM context via the streamed event body.