trading-signal

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly directs the agent to fetch and interpret live smart‑money signals from the public Binance API (https://web3.binance.com/bapi/defi/v1/public/wallet-direct/buw/wallet/web/signal/smart-money), i.e., open third‑party data that the agent ingests and uses to drive trading decisions, so the content could materially influence actions and carry injected instructions.