swap-planner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill explicitly fetches and parses public third‑party data (e.g., DexScreener and GeckoTerminal in "Step 0: Token Discovery" and "Step 4: Fetch Price Data", CoinGecko examples, and a "Web Search Fallback") and uses those results to choose/verify tokens and build deep links, so untrusted user-generated or public-site content can materially influence decisions and subsequent actions.