mlb-player-analyzer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs the agent to web-search and ingest player pages from public third-party sites (see "Step 2: Collect performance data" and the source cheatsheet listing Baseball Savant, FanGraphs, MLB.com, RotoWire, RotoBaller), and those fetched pages are directly used to compute signals that drive downstream decisions (daily_quality/streamability_score), so untrusted web content could materially influence agent actions.