nutmeg-learn

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly requires using the football-docs MCP tools (e.g., "Always use search_docs" and the "Provider documentation" section) to fetch and read provider-specific/public documentation (StatsBomb, FBref, Opta, etc.), so the agent ingests untrusted public third-party content and uses it to drive answers and actions.