dealer-match-finder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's workflow (steps 1 and 2 in SKILL.md) explicitly calls MarketCheck endpoints (mcp__marketcheck__search_active_cars and get_sold_summary / search_uk_active_cars) to fetch public dealer inventory and sold-data, which the agent ingests and directly uses to compute match scores, recommendations, and next actions — i.e., untrusted third‑party content can materially influence behavior.