aibtc-news-deal-flow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's check-sources command (documented in SKILL.md and AGENT.md and implemented in aibtc-news-deal-flow.ts) issues network HEAD requests to user-supplied public URLs (e.g., https://ledger.drx4.xyz, https://aibtc.com, https://api.hiro.so, https://rep-gate.p-d07.workers.dev) and the agent is instructed to run these checks and use their results before filing signals, so untrusted third‑party responses can directly influence whether and how the agent proceeds.