grimoire-pendle

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill fetches runtime metadata from the public Pendle API (default https://api-v2.pendle.finance/core, and overridable via --base-url or PENDLE_API_BASE_URL) which the agent ingests to preflight routing and market/asset decisions, so third-party responses could materially influence behavior.