charli3-push-oracle

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's guide (rules/push-oracle-guide.md) explicitly instructs contracts to read globally accessible aggregator UTXOs via CIP-31 reference inputs (e.g., the Aiken example using find_reference_input(ctx, aggregator_nft)), which are public, third‑party on‑chain data the contract/agent must interpret and which can materially drive decisions like price-dependent logic.