mlb-regression-flagger

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's required workflow explicitly instructs the agent to perform live web-searches and scrape player pages from public third-party sites (Baseball Savant and FanGraphs — see "Step 2: Web-search Baseball Savant" and "Step 3: Web-search FanGraphs" in SKILL.md and resources/methodology.md), and those fetched pages are used to compute the regression_index and drive BUY/SELL actions, so untrusted third-party content could materially influence the agent's behavior and enable indirect prompt injection.