felo-superAgent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly calls the Felo Open Platform (e.g., GET /v2/conversations/stream/{stream_key} at https://openapi.felo.ai) and exposes LiveDoc/resource and tool (e.g., Twitter/HTML) fetches in SKILL.md/README, so the agent consumes untrusted third‑party SSE and LiveDoc content as part of its workflow which could carry instructions.