defi-yield-scout

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In DeFi Yield Scout Mode, yield_finder.py (and likewise yield_risk_scorer.py/yield_strategy.py) reads and incorporates free-text-like fields from the DeFiLlama pools/protocol JSON response returned by https://yields.llama.fi/pools, which is not an outsider-authored submission path but an external data source whose records could contain attacker-controlled strings that the script then formats into outputs.