cattown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill documentation and guidelines instruct the agent to fetch items from https://api.cat.town/v2/items/master, view leaderboards from https://api.cat.town/v2/revenue/staking/leaderboard, and check user capsule drop items from https://api.cat.town/v2/items/capsule/<address>, which are public API endpoints that ingest third-party user data and catalog items without prior agent filtering of specific trusted items.