geo-reddit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses Reddit data fetched via Xpoz API tools (getRedditPostsByKeywords, getRedditPostWithCommentsById, and search_posts) and parses outsider-authored thread titles, text, and comments into the agent's context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill fetches a remote skill file from GitHub at runtime (https://raw.githubusercontent.com/XPOZpublic/xpoz-agent-skills/main/skills/ai-answer-trace/SKILL.md) to follow instructions if another skill is not installed.