real-estate-property-matching-engine

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly requires the agent to "search across all relevant listing sources" and references public portals (Bayut, PropertyFinder, Dubizzle) and pulling DLD transaction data, so the agent ingests open/public third‑party listing/transaction content and uses it to drive matching decisions.