huopan-listing-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow calls an MCP service (search_listings) to retrieve commercial real estate listings, and the description field in each listing contains owner- or agent-authored free text ("房源自述（业主或代理填的原文）").

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to make runtime HTTP requests to an arbitrary raw IP address (http://101.42.15.203:8333/api/ai/mcp) to execute MCP tool calls, constituting an unverifiable external runtime dependency with weak provenance.