crypto-listings

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow in SKILL.md instructs the agent to “retrieve and format new and upcoming cryptocurrency listings” from sources like “official exchange announcement pages” and aggregators (public web content) at runtime, which can include outsider-authored free text that the agent then ingests into the LLM context.