bitcoin-daily

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's required workflow explicitly fetches and archives threads from the public Bitcoin Development mailing list (groups.google.com/g/bitcoindev) and commits from github.com/bitcoin/bitcoin and the agent then reads and summarizes that user-generated content, so untrusted third-party content could contain instructions that influence the agent's outputs or actions.