football-data

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's SKILL.md explicitly instructs the agent to fetch and consume public third-party data (ESPN, Understat, Transfermarkt, openfootball, FPL) via the documented commands (see "Data Sources" and the example workflows calling get_event_summary, get_event_xg, get_player_profile), so untrusted web content is read and used to drive decisions and follow-up actions, creating a clear indirect prompt-injection surface.