mlb-two-start-scout

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md and resources/methodology.md explicitly require fetching and scraping public third‑party sites (e.g., FantasyPros two-starts page, FanGraphs probables-grid, RotoWire weather, and Yahoo fantasy pages) and the agent is expected to read and interpret that content to compute streamability scores and emit signal files that directly drive downstream actions (ADD/START/BID), so untrusted web content can materially influence behavior.