tres-tx-story

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md, Step 2 fetches a user_provided_hash via the TRES Finance MCP and Step 3/4 parses and renders transaction fields (e.g., names/symbols/addresses/classifications) from that response into inline SVG/HTML, so outsider-authored free text can reach the LLM/UI when those fields originate from external parties on-chain or other submitters.