lastfm

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The Last.fm skill queries the Last.fm music API, which returns music metadata, charts, and user data; while third-party user tags or profile information could theoretically contain text, the agent actively searches or queries specific artists, tracks, or users, placing it under low-risk outsider content fetching rather than unmonitored feeds.