zoning-analysis-uruguay

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly instructs the agent to fetch and WebFetch normativa articles from the public Digesto site (https://digesto.maldonado.gub.uy/) when local files are missing and to read that external content to determine zones and drive envelope/strategy decisions, so the agent will ingest untrusted third‑party web content that can materially influence actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly fetches regulatory text at runtime from the Digesto site (e.g. https://digesto.maldonado.gub.uy/index.php/armado-seccion/{id} and https://digesto.maldonado.gub.uy/index.php/detalle-articulo/{id}), and that fetched content is ingested to determine zoning rules and drive the agent's analysis/decisions, so it directly controls the agent's prompts/behaviour.