local-business-reputation-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow queries public business and review platforms (Yelp, BBB, Trustpilot, OpenTable) via an API, which ingest user-submitted reviews, complaints, and scam reports containing outsider-authored free text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill makes runtime HTTP requests to the Crawlora API at api.crawlora.net, which serves as a third-party commercial proxy and transporter rather than an official publisher of the underlying third-party platforms (Yelp, BBB, Trustpilot, OpenTable), resulting in an unofficial operational dependency.