aris-vast-gpu

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill directly queries and ingests marketplace data from vast.ai (e.g., the "vastai search offers" and "vastai show instances" outputs described in "Step 3: Search Offers" and elsewhere) and reads those untrusted, public offer records (IDs, GPU specs, reliability, etc.) to decide which offer to rent and which actions to take, so third-party content can materially influence tool use.