pitchfork-best-tracks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to load and parse the public Pitchfork page at https://pitchfork.com/reviews/best/tracks/ and use the extracted content to drive Spotify searches and playlist-creation, so untrusted third-party page content could influence tool use and induce indirect prompt injection.