astrophysics-data-guide

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). SKILL.md describes a required runtime workflow that only processes user-supplied data (e.g., functions that read FITS files from a provided filepath) and uses first-party service libraries (Astroquery query functions) without specifying that the agent ingests arbitrary outsider-authored free text before selecting a specific catalog/object.