weekly-dealer-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs spawning agents that query external market/listing sources (e.g., search_active_cars(source="location1.com", mcp__marketcheck__search_uk_active_cars and the market-demand-agent/lot-pricer flows) and then uses those third-party listings/hot_list/demand_snapshot outputs to drive pricing, stocking recommendations, and follow-up actions, so untrusted public content is ingested and can change agent behavior.