card-optimizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly tells the agent to "look up the card's current reward structure via web search" (see "Adding a New Card" and "First-Time Setup"), meaning the agent will fetch and parse open/public web content and use it to update cards.json and drive recommendations.