binance-tokenized-securities-info

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to fetch and consume public Binance API data (e.g., the SKILL.md APIs like https://www.binance.com/.../rwa/meta/ai, .../dynamic/ai, and .../asset/market/status/ai and relative report URLs on https://bin.bnbstatic.com) and to read company metadata, attestation reports, status reasonMsg and token prices as part of its workflows, which are third‑party public content that can materially influence decisions and tool use and therefore could enable indirect prompt injection.