model-observatory

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required sync workflows (tools/model-observatory/daily-sync.ts and apps/worker/src/queue/workers/kie-observatory.worker.ts) ingest model/pricing data from public Kie.ai/fal.ai endpoints which populate ai_models/ai_model_recommendations used at runtime, so untrusted third-party page content can directly influence model-selection decisions.