streamlit-dashboards

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md "Caching" section defines load_data(url: str) that calls pd.read_csv(url) and shows df = load_data("https://example.com/data.csv"), which clearly instructs fetching arbitrary public URLs (untrusted third‑party content) that the app will read and use to drive dashboards/ML behavior.