stablecoin-yield-radar

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md explicitly instructs the assistant to call Barker's public API (GET https://api.barker.money/api/public/v1/defi/vaults) and ingest returned protocol names, asset symbols, descriptions, APY and TVL fields from that public, untrusted source to determine and recommend top yield opportunities, so third-party content can materially influence agent decisions.