find-funding-opportunities

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and ingests open/public third‑party content from the Karma Funding Map API (e.g., https://gapapi.karmahq.xyz/v2/program-registry/search and /v2/communities) and directly reads program metadata/descriptions/links (from SKILL.md workflow Step 3–4) which the agent uses to decide what results and follow-up actions to present.