dip-scanner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path dip_scanner.py fetches “free” text via HTTP/JSON from outsider-accessible endpoints (e.g., fear_greed() reads https://api.alternative.me/fng/?limit=1, and btc_funding_rate() reads https://www.okx.com/api/v5/public/funding-rate?... and https://indexer.dydx.trade/...), which are not constrained to first-party/trusted authorship.