exotic-car-rental

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow queries an external vehicle catalog via MCP/API (https://mcp.carrentallist.com/mcp) populated with web-scraped independent rental company data and listings, where outsiders can publish listings, descriptions, and terms.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skills reference an external MCP catalog server at carrentallist.com as an operational data dependency, published by an independent project organization.