crypto-report

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's shell scripts directly curl and parse content from public third-party endpoints—Binance's AI report API (https://www.binance.com/bapi/bigdata/...) and TheBlockBeats open API (https://api.theblockbeats.news/...)—so the agent ingests and interprets untrusted external content.