trading-signal

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly directs the agent to fetch public Smart Money signals from the Binance Web3 API (https://web3.binance.com/bapi/defi/v1/public/wallet-direct/buw/wallet/web/signal/smart-money/ai), which are third‑party, external data the agent must read and use to make trading decisions, enabling indirect prompt injection via untrusted content.