blockchain-security-auditor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). Yes — SKILL.md's workflow explicitly instructs the agent to "Read the protocol documentation and whitepaper" (Step 1) and the "Instructions Reference" directs the agent to consult public third‑party sources (SWC Registry, rekt.news, DeFiHackLabs, Trail of Bits, OpenZeppelin archives), which the agent is expected to read and use to drive audit findings and next actions.