tracking-crypto-prices

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md and ARD (and scripts/api_client.py) explicitly fetch and parse public third‑party APIs (CoinGecko and yfinance) /coins and /simple/price endpoints and use those JSON responses to drive processing, cache updates, outputs and downstream skill actions, so untrusted external content is ingested and can materially influence behavior.