monitor-buying-signals

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md’s runtime workflow, Step 3 calls Cargo orchestration connectors like theirStack.searchJobs and x.getUserPosts (via cargo-ai orchestration action execute/execute-batch), which ingest outsider-authored free text from third-party accounts/posts without selecting a specific item first.