rental-assistant

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow monitors public housing search platforms and social feeds (such as Xiaohongshu and various rental sites) where outsider-submitted listings, reviews, and posts can be retrieved and ingested by the agent.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill references a third-party Homebrew package repository locator (xpzouying/agent-cli) to install an operational command-line utility, representing an unofficial external dependency.