gtars

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's BBCache functionality explicitly fetches BED files from the public site bedbase.org ("gtars bbcache fetch --id <bedbase_id> --output cached.bed"), which ingests and processes public/user-provided BED data (e.g., RegionSet.from_bed) and thus exposes the agent to untrusted third-party content.