dealer-engagement-scorer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's Workflow (steps 1 and 3 in SKILL.md) requires calling mcp__marketcheck__search_active_cars (using dealer domain/source or city+state) and mcp__marketcheck__get_sold_summary to ingest public dealer listings and sold-data from third‑party websites, and the agent must read and act on that data to compute scores and recommend engagement actions, exposing it to untrusted third‑party content.