run-list-analyzer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's workflow explicitly calls MarketCheck APIs (e.g., mcp__marketcheck__search_active_cars, mcp__marketcheck__get_sold_summary, mcp__marketcheck__predict_price_with_comparables) to ingest live listings and sold-summary data from public marketplaces (dealer/consumer-supplied listings) and then uses those results to compute hammer prices, sell-through, and lane sequencing, so untrusted third-party content could materially influence agent decisions.