espn-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s required runtime workflow for get_news pulls real-time news from ESPN’s Now API (now.core.api.espn.com/v1/sports/news), whose headline/description fields are free-form text authored by ESPN writers and thus outsider-authored content is ingested into the agent’s LLM context via the tool output.