consignment-sourcer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill explicitly fetches public dealer/listing data from third-party Marketcheck endpoints (e.g., mcp__marketcheck__search_active_cars and search_uk_active_cars) and then reads and interprets those listings (vin, seller_name, price, DOM, etc.) to make pricing, urgency, and outreach decisions, so untrusted user-generated content could materially influence agent actions.