mlb-matchup-analyzer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill is explicitly web-search-driven (resources/methodology.md "This skill is web-search-driven" and the Workflow/Sources sections in SKILL.md) and requires fetching and citing public third-party pages (MLB.com, FanGraphs, RotoWire, RotoBaller) whose content the agent must read and use to compute signals and make decisions, creating clear exposure to untrusted external content that could carry indirect prompt-injection.