transistorfm

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly instructs the agent to use the Membrane CLI to connect to Transistor.fm and run/list actions (e.g., "membrane action run" / action list with a connectionId) to fetch Podcast/Episode/Analytics data from Transistor.fm — user-generated third-party content the agent will read as part of its workflow and that could contain instructions that influence subsequent actions.