floor-plan-opportunity-scanner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly calls the MarketCheck API (mcp__marketcheck__search_active_cars) to fetch public dealer inventory/listings (third‑party, user-generated dealer listings) and instructs the agent to read and act on that data to compute metrics, scores, and outreach recommendations, which meets all criteria for exposure to untrusted third‑party content.