defi-portfolio-tracker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's workflow (SKILL.md step 2: "Collect balances and position data from preferred portfolio providers") and the position schema example (source: "debank") show the agent fetches and ingests data from public third‑party portfolio providers, which the agent reads and uses to drive portfolio calculations and risk decisions, exposing it to untrusted content that could carry indirect prompt injection.