signals

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs using sn signals to subscribe to a live NATS signal stream (e.g., subjects like signals....user.my-strategy) and to parse those JSON signal payloads as the primary input loop — which includes user-published "user." signals — so untrusted third-party content is ingested and can directly change trading actions.