music-podcast-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes that the agent uses Crawlora API endpoints (e.g., /spotify/search with user-provided q, /spotify-podcasts/search with q, /discogs/search with q, /soundcloud/search with query) by calling scripts/crawlora.sh, so outsider-authored free text supplied in the query/search term is ingested at runtime into the API request flow without preselecting a specific item.