ops-nzbgeek

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly queries the public NZBGeek API (see SKILL.md and ops_nzbgeek/search.py which call https://api.nzbgeek.info/api) and ingests those untrusted, user-contributed search results into its interview/selection flow and download logic (which then passes selected NZB URLs to SABnzbd), so third‑party content can directly influence actions.